From d4fa5f28ca910021162e74956cae8e6e7ccb8583 Mon Sep 17 00:00:00 2001
From: P4T12ICK <patrickbareiss1989@gmail.com>
Date: Fri, 31 Mar 2023 09:05:32 +0200
Subject: [PATCH 1/3] New ZScaler Playbook

---
 .../Zscaler_Outbound_Traffic_Filtering.json   | 280 ++++++++++++++++++
 .../Zscaler_Outbound_Traffic_Filtering.png    | Bin 0 -> 31415 bytes
 .../Zscaler_Outbound_Traffic_Filtering.py     | 170 +++++++++++
 .../Zscaler_Outbound_Traffic_Filtering.yml    |  24 ++
 4 files changed, 474 insertions(+)
 create mode 100755 playbooks/Zscaler_Outbound_Traffic_Filtering.json
 create mode 100755 playbooks/Zscaler_Outbound_Traffic_Filtering.png
 create mode 100755 playbooks/Zscaler_Outbound_Traffic_Filtering.py
 create mode 100644 playbooks/Zscaler_Outbound_Traffic_Filtering.yml

diff --git a/playbooks/Zscaler_Outbound_Traffic_Filtering.json b/playbooks/Zscaler_Outbound_Traffic_Filtering.json
new file mode 100755
index 0000000000..f77a7624f5
--- /dev/null
+++ b/playbooks/Zscaler_Outbound_Traffic_Filtering.json
@@ -0,0 +1,280 @@
+{
+    "blockly": false,
+    "blockly_xml": "<xml></xml>",
+    "category": "Isolation",
+    "coa": {
+        "data": {
+            "description": "Accepts a URL or list of URLs as input. Blocks the given URLs in ZScaler.\n\nhttps://d3fend.mitre.org/technique/d3f:OutboundTrafficFiltering/",
+            "edges": [
+                {
+                    "id": "port_0_to_port_4",
+                    "sourceNode": "0",
+                    "sourcePort": "0_out",
+                    "targetNode": "4",
+                    "targetPort": "4_in"
+                },
+                {
+                    "conditions": [
+                        {
+                            "index": 0
+                        }
+                    ],
+                    "id": "port_4_to_port_6",
+                    "sourceNode": "4",
+                    "sourcePort": "4_out",
+                    "targetNode": "6",
+                    "targetPort": "6_in"
+                },
+                {
+                    "id": "port_7_to_port_1",
+                    "sourceNode": "7",
+                    "sourcePort": "7_out",
+                    "targetNode": "1",
+                    "targetPort": "1_in"
+                },
+                {
+                    "id": "port_6_to_port_8",
+                    "sourceNode": "6",
+                    "sourcePort": "6_out",
+                    "targetNode": "8",
+                    "targetPort": "8_in"
+                },
+                {
+                    "conditions": [
+                        {
+                            "index": 0
+                        }
+                    ],
+                    "id": "port_8_to_port_7",
+                    "sourceNode": "8",
+                    "sourcePort": "8_out",
+                    "targetNode": "7",
+                    "targetPort": "7_in"
+                }
+            ],
+            "hash": "d00eda8b809a9b54fd2a3df75a64dc1538169f7c",
+            "nodes": {
+                "0": {
+                    "data": {
+                        "advanced": {
+                            "join": []
+                        },
+                        "functionName": "on_start",
+                        "id": "0",
+                        "type": "start"
+                    },
+                    "errors": {},
+                    "id": "0",
+                    "type": "start",
+                    "warnings": {},
+                    "x": 20,
+                    "y": 0
+                },
+                "1": {
+                    "data": {
+                        "advanced": {
+                            "join": []
+                        },
+                        "functionName": "on_finish",
+                        "id": "1",
+                        "type": "end"
+                    },
+                    "errors": {},
+                    "id": "1",
+                    "type": "end",
+                    "warnings": {},
+                    "x": 19.999999999999986,
+                    "y": 864
+                },
+                "4": {
+                    "data": {
+                        "advanced": {
+                            "customName": "url input filter",
+                            "customNameId": 0,
+                            "description": "Determine branches based on provided inputs.",
+                            "join": [],
+                            "note": "Determine branches based on provided inputs."
+                        },
+                        "conditions": [
+                            {
+                                "comparisons": [
+                                    {
+                                        "conditionIndex": 0,
+                                        "op": "!=",
+                                        "param": "playbook_input:input_url",
+                                        "value": "None"
+                                    }
+                                ],
+                                "conditionIndex": 0,
+                                "customName": "input_url",
+                                "logic": "and"
+                            }
+                        ],
+                        "functionId": 1,
+                        "functionName": "url_input_filter",
+                        "id": "4",
+                        "type": "filter"
+                    },
+                    "errors": {},
+                    "id": "4",
+                    "type": "filter",
+                    "warnings": {
+                        "config": [
+                            "Reconfigure invalid datapath."
+                        ]
+                    },
+                    "x": 60,
+                    "y": 148
+                },
+                "6": {
+                    "data": {
+                        "action": "block url",
+                        "actionType": "contain",
+                        "advanced": {
+                            "customName": "block url",
+                            "customNameId": 0,
+                            "description": "Block urls in ZScaler based on given urls. ",
+                            "join": [],
+                            "note": "Block urls in ZScaler based on given urls. "
+                        },
+                        "connector": "Zscaler",
+                        "connectorConfigs": [
+                            "zscaler"
+                        ],
+                        "connectorId": "ee475421-d2e4-4d8e-addb-a2ce1465d6a3",
+                        "connectorVersion": "v1",
+                        "functionId": 1,
+                        "functionName": "block_url",
+                        "id": "6",
+                        "parameters": {
+                            "url": "playbook_input:input_url"
+                        },
+                        "requiredParameters": [
+                            {
+                                "data_type": "string",
+                                "field": "url"
+                            }
+                        ],
+                        "type": "action"
+                    },
+                    "errors": {},
+                    "id": "6",
+                    "type": "action",
+                    "warnings": {
+                        "config": [
+                            "Reconfigure invalid datapath."
+                        ]
+                    },
+                    "x": 0,
+                    "y": 328
+                },
+                "7": {
+                    "data": {
+                        "advanced": {
+                            "customName": "build observable",
+                            "customNameId": 0,
+                            "description": "This block uses custom code to generate an observable dictionary to output into the observables data path.",
+                            "join": [],
+                            "note": "This block uses custom code to generate an observable dictionary to output into the observables data path."
+                        },
+                        "functionId": 1,
+                        "functionName": "build_observable",
+                        "id": "7",
+                        "inputParameters": [
+                            "block_url:action_result.summary",
+                            "block_url:action_result.status",
+                            "block_url:action_result.message",
+                            "block_url:action_result.parameter.url"
+                        ],
+                        "outputVariables": [
+                            "observable_array"
+                        ],
+                        "type": "code"
+                    },
+                    "errors": {},
+                    "id": "7",
+                    "type": "code",
+                    "userCode": "\n    build_observable__observable_array = list()\n    for summary, status, message, url in zip(block_url_result_item_0, block_url_result_item_1, block_url_result_message, block_url_parameter_url):\n        observable = {\n            \"type\": \"url\",\n            \"value\": url,\n            \"source\": \"ZScaler\"\n        }\n        if len(summary[\"ignored\"]) > 0:\n            observable[\"status\"] = \"ignored\"\n        else:\n            observable[\"status\"] = \"updated\"\n            \n        build_observable__observable_array.append(observable)\n        \n\n",
+                    "warnings": {},
+                    "x": 0,
+                    "y": 700
+                },
+                "8": {
+                    "data": {
+                        "advanced": {
+                            "customName": "block url success filter",
+                            "customNameId": 0,
+                            "description": "Determine if the block url action was successful or not.",
+                            "join": [],
+                            "note": "Determine if the block url action was successful or not."
+                        },
+                        "conditions": [
+                            {
+                                "comparisons": [
+                                    {
+                                        "conditionIndex": 0,
+                                        "op": "==",
+                                        "param": "block_url:action_result.status",
+                                        "value": "success"
+                                    }
+                                ],
+                                "conditionIndex": 0,
+                                "customName": "success",
+                                "logic": "and"
+                            }
+                        ],
+                        "functionId": 2,
+                        "functionName": "block_url_success_filter",
+                        "id": "8",
+                        "type": "filter"
+                    },
+                    "errors": {},
+                    "id": "8",
+                    "type": "filter",
+                    "warnings": {},
+                    "x": 60,
+                    "y": 506
+                }
+            },
+            "notes": "Inputs: url\nInteractions: ZScaler\nActions: block url\nOutputs: observables"
+        },
+        "input_spec": [
+            {
+                "contains": [
+                    "url"
+                ],
+                "description": "Accepts url and block them",
+                "name": "input_url"
+            }
+        ],
+        "output_spec": [
+            {
+                "contains": [
+                    "url"
+                ],
+                "datapaths": [
+                    "build_observable:custom_function:observable_array"
+                ],
+                "deduplicate": false,
+                "description": "An array of observable dictionaries with value, type and information about the blocked urls.",
+                "metadata": {},
+                "name": "observable"
+            }
+        ],
+        "playbook_type": "data",
+        "python_version": "3",
+        "schema": "5.0.9",
+        "version": "6.0.0.114895"
+    },
+    "create_time": "2023-03-31T06:50:12.071333+00:00",
+    "draft_mode": false,
+    "labels": [
+        "*"
+    ],
+    "tags": [
+        "url",
+        "D3-OTF",
+        "ZScaler",
+        "denylist"
+    ]
+}
\ No newline at end of file
diff --git a/playbooks/Zscaler_Outbound_Traffic_Filtering.png b/playbooks/Zscaler_Outbound_Traffic_Filtering.png
new file mode 100755
index 0000000000000000000000000000000000000000..7f6babff65cdb8d99a3721a29d9b3d5a59a9cf8e
GIT binary patch
literal 31415
zcmeFZcT`jB+Alh>q053DrK*UaR0Zk9vH%ef6a?ugU7GZk5Ui+_sPqm>5fLJUUJ@+y
z9s~?6LZp`n1VRW&?i+BGy}y0WKHnK<k9)?r=Z}@OSebKXmS;ZYSKeoO*EDwj#`PNn
zLAy1t{C)$1HeZ6EEf(9if&a5Q8_Wg%#pZcK;}VqL#xn{2*kXTC=OP3ZAa}0a-U|NS
zaqo(;Cj{;J%=(9|-tDao1O;eo{(jNG&ti6PhZT=KT$Yhq^;}HN$GP#9=g7Amw~p`F
zvG<B_nS^F=jMNKNv5uG*hfN|d%5njo<vb))lQ}Y6-o)W_(PJD&Q|>pnex9m0fxQur
zPM$m-f&3!RQy=5pm~FT^eYCajxtQWBpObmgsT`t<Ei-dQmDVSxr|s=Za;o1r34?RH
zYGZ-f0ztyN)wY9A-v6b~<f~3j{RuFo+k=C-uhE{4Wb$%d$9F4CvC28yruV7Z@#m(6
z^s`!48>8?I@pg|OC>ZB>mo&lERDZzG(X}n6`~H1r<1O*$LQm-1UAJixeXbp^_VP4Z
z*tYF`?shf^YEj=4z8RdV#=cGe(a&sLUth^7e%)KXly?&|W?ahE)n}#U;@t9(f4hX!
z=%919G9Fn+k3&$JS3;j+#gm2kM>i7^(YD@J$4n1j%xZbv5M_Muugkd_FExDzL=1#}
zd6~$%`0MMp;6L}7Q&dut*I0j`XR!K=f?}+?uAAGg-FwDNrv)~i!ulnwKbY_&M|IY7
zPtID7$WI4PFnVmv*_ii8LyX!B@Bq%)9#;G7a&C;ZR6O4cK{d`lI^<Xve{lU4{O3N;
z<mI_Ift%~?i+bMHmf6|W&wcsfLu$`zL)2fFz=|z90sDmY*vMWFYw!d!%jHcC*|!zi
z?)zIj{kohed362>5c87U^3r?$mxKQAugb66w@Y%mB~e!5u(*QwSi9wm@cVDLd3eI$
zv}JWd8!!Gy+WWO0sKq2_rO4MyT}vx>{}y5t#t28zULBf;Z;pyj4X$|~ZTH|zbW=l<
zURT3@xr((wK{zRcbUe85#-m_k5#Bwqn%HmW<(oL`1mUP3wi7j!y%%<zzEtzx`}+qz
z!R@C`F;m<fc=YU|dwNRFQ~f?wR2r$-kK-mLXT#GUTq}z@t#3zfdWA2!cU@)Esaz~p
zf}i)t_$%%BrAYirJmd6wBvgo}n*ZZV={aXFuE_WT+oIhQ!%k|~V5gR!T#pUgGw0wD
zdnKKC^S1N$_i=^B7V%fT8<5U5%<b$)EBnk2CA;0PlQ!J9NqBQe9h)akJ0|TUe3r}w
z1=nS4-}pO0-ETKk^X-2=hBjWfvo-GvXI2g@b`D>YA3aN*=u8gkYjSXMYVO@rK@}?f
z@usnoG8DM5PdZDCV<;5~HL2~}WS95)c}Fjk{tiaIB1?d2t#zhWiCHG{s6AEB-p*z_
z+94NwJ9XtpHX5g237_Lv<sVP-^pP=@wjNr;uQck&MpVFMhF%e(%YV?_2Y)V0RLNUP
zbeJ;ySEkJu8D%Fe*@Mf~_iZ{-GB;O=KAP4y`z{yDL#J1cAm~dWg-74?&C0iz%OUE%
zR{XeZiA*(PtiWcs^991Z#y;PvmgGZ=@^7l)$=uEsmX1QHiZjCr0bfL~d#n{sI&7B+
z3vJgtWbb6QxSajvKwI9Rcqm7h(y_&u?1+PzQWE@5brTfg&f@qC1cMIi{{TDeNM3&L
zHAr4sx#zMv{%R+2fIO-w5k?t9R?l6Q;3?;T#<r_%|GxdkQ7&aIX}SXOOa0hqjU%V!
zu|am2fH=;&5LCJ7o&ornEmBnBd~-@{^lOR*?4HGG5j7I#-gCPID9yd>)+R}(L;eMi
zm}@8};z#z<-z^b{wcej{(P@`6>oYw=a4uD+;02Gof;!Se>IRqbexFdVla@zMi{*S7
zSdP#B(ySWi#`Ad?sik&C;;JbMS*kM4F{0%NyAZ^Tqnzyp$Ja9iwc?5LIG(d!1TlMP
zezg~KYG@&g&|KP<#$ge|zlVY^6C*^~`P2p8e)RJ5p!yysZe`-)71eO8kryPKQ}J96
zB=Q+ni7EZ6%gSS-_G31gp1~=!wOAXpvMR-s(<XDGqrYY4N)@bZZ}n1N9(DCiZYyLf
zb>#p|{3LpmX1=i-$o9e4aor<x7TDpZYQlrEyoJq1<5CLj_TD9Rbl>m+)xK|>T1SG&
zo2Q>JOMQkPYu+o^0*!sBXxsPheBo5hg%Z&RtfD4QkqTAP5N_SBQ@eHFslW)mGnYav
zcHN#Xb{cst3m3H1Qcs?aq&lv_eQe7$TnQE4PF_9{-Vu7U^C60oxlxL1PEtl;-VrZS
zwKj@n)`_m#{lUgg;+)6h#KmKvsOUc`Ofar;Y6|rwhMm8u7YaUi&w&R#E^mhc0}ltD
z@V0dK3&!#PooYIkakn@DX?IPaY8zzb{CuyZ(9*JVYUhbp7@vUM&;{$e8}%GQHx&|f
zTQq8HT>O7BU|aOWH_H7#);e&)_wL=Zk^CxMxTQ{rnIivFd5hkqf0?v`;+j~w-nP+M
zWh~CYRprzP`nA}gg07J7owfuKfnLqNN?%<c#VBw?Y<qO=h^#tbmxoDK++%S<ky*RP
z?;w?Ob#+LSa2c|_**l6BX>G+9DoDN%3q8i_HDUxjhpPMw?sdAKMKB&X@8U66;Bh5j
zs*QIj;L_cL#2eRpk@)A@sRCPS9w{%zw>N3*BL(&L6KBxvExmQ)F{ZAerC8!1)#QsT
z#$88cQ}E<)sxDjHhm@3As_>oWn2?3emGGdp2~j9c92Cz3J-ww;{A%wlvB&wt2@~UC
zZD5br+u0;<)8TNc@JPip!;(y)j5{I4m1UH(?Ys^{+MH_JgLh0%4)Sf@Ohdaf^Ud9B
z5AnCx5$8KaRAQ8cG>@L%31yj@gHya9zkAm%n^a;)XMwaSp^A$6){PZ0%nNXCNmW(t
z_jxOQfLz`VXY4~?oF-Xt_LsOd_d-^y!j~ZJrif(4JHxNl+-C}0@T<wbLx)sXJ9RpT
zFehU~jbUkfGdGcm{Dh=duEC$x+-R4^o)G@$-qS%bD7G512h|xml~-Oa-=<7yEVwuP
z8rFQVxuT+QG$v#Z_MKV9g-<%Nbjd{HO~LVL+u8I=^>xjUiWnxvpt`>@0vwxS1!SDd
z6lGk^Qo+Gm^d3RNUp_tFN&Gr|uIPiy^`fGpAEp{Jc(l;!s&8H0@cyskXWSua2;7rT
zVz)jVOIa@J#;;To%((+8bFFnyhp?Fnckrih6-vGT1xWhD|3pLkZ`)U?WO=uts#_SC
zn#@p<<K<nudDj{gXn*!ne|5A9EA3tf4A!gXCRNe(l*8%-5468GI8zX?^ce3q+c*8j
zB+rich4HIJL?^|2A36>lY3>BkA-xIINeIe(!|HnfgP;12E-t2#NTK(Yfj7N;#KTjD
zhK_LYw3PN}WU-oo)1FyU<E@FD&9SJ4x<nb5r|IeG&Pm@=S+5vt11SN}Jw;v957g-W
zh{#GzyXxs#@_x@Qo8}XLG`^lA@zGZW4N(|LZj^Z-+#t7megBOHKSpZ3|FV`h*|#ZJ
z{rmqJy=0r$Se5_c9qPg%ykA$=?z7U;QQ-&v%`^UovE`Z)`bN%|scud?VzCnn3DPBN
z|BZR3#lx=W<|D{TR72zv)Uln1iyhp*2v!gJAN;(QSzPR*qmuGrZti9$zFayWAkf<3
zo+QD9KYsl|w#2t3$+}sHT4GLcyY&?vfAZu>q5B;~Q<SkPYlHSM(CX_c=*;q(voqse
zADsEe%n7EnmS^^cXQFRauYPi_@|j(_o@a<=?Y}X;8Mmzu3t^)U;0@%uzfqRXf)q6<
zUiN*m6NgJc@eZaaR}!CaW0F}fz9j2A8P{9<54$z6&vm_5&Q2CUl3k!PoLa7VNU6Wz
zjrh_TarOuXrLY!9z6HfOf*0oTEd-_Fh*FciqCp5r3&|F&&dM-P-?aS}zk5^KN08YL
zj$J`tvU><QNV7IS>S@^EycgPiW#6VWJ;yO2bKd+q@OSw7-}v_(-)kD)cl>loQ?QcR
z9{dEnhI((u#>V^{4CXb7MY|y`O;*fL2$Zu~-MA)CJ?lP|Bl3nCXT2bXl>UG~I1iMm
z%nibHF<T)!@N_Sj<DA=#?UN5^#T1R3Mz~J*gp5Qex`y7re;>9J(pCj2Ow+XN-tDBo
zwn&b|ty5D|VbLPGt##AAZebyOeF@=CxS0+eS*GOb>gs|RBv}pa#i`k<#WsHN%b^R!
zPZ!%&C4xx4guN~<F4UNPbUK|?5e^e*LmUfY`{0VcbsRw})v(=AmeEEiYzuZ*q?7Bx
zNKgn98}UVqFU`Me4mv;9o|@_=FYH32cIzT-&CNgCPSm}0*?HI|q}zpn5i?~Ep8WC7
z9n!v~aB?n6KW5x%p9BK0MH~rDjYshs2WSU4>oi?4h9n246825aSsY4E)_Rj&D*I#`
zN06U|vdu<7Wh;0Z_s(~M!o;1uc%MPmWgg>3*5mC{kM>&7!oL+e8I@oH{mQM!Bb=3t
z8DTc-<Ed@4G^_3whbu@-jD+&RPfh4?CNZO6<OWtb^)?qxe}%YUQCy>y27Y9H;$HmO
zvQyko9aIe)qAHar%Yjlo&yDQeEelg+jKKL@>H>X8&$uy^yp3Pk7;l}|S}N=w;dY*0
zs6F||$g8A;Hhl2vGHS0Z-<#AfT!5rgVb)@G@8ykgIO?2z1x)6`!@y<zKH|t?%<q(i
z9$0gW7N?wpD<5?xEmBwIEGV3>!s~OhvxQ{bFsj@fyJp<V+7DD%cg>ZJvG)@bxC6mM
zZ8`sZ?}dj7?vra}s}gO`>qT=Bb&neHD>W%)<aXC^8vjtN8=F-=sES-2J9rm~S|r85
zvMpjy73T)IjS#sAzscD7NgTXst&DthC(-?Lb709#I47f1_fGRNomvgGYz4>PY_d3|
zPxO{hIgNog&-oGSOTG-zgA8;_W2idwF9~zcvy=UuVKYs%5px9gEEWthHKS-Yt`0R_
zKKb!60V7xa2X+l9@XMcRh#x%Z_A2h~C0nfK*3YRxOh7fIbXIiiGBGa6MKKre(ODo6
z>$3IN*Dlk(w#_@+m1RuNNu~I=H88NYml1#NEQBRrC|M&(SnRLooz_^=zCxpyN*tB{
zecmmful%bl<QWnw2uZ)yr91j6F&%l`NBejS#`sG{O{aYaUaQT&GpasksW>oOO4!Hr
zZY`#o_~-fG)G(`9EnA_GTtj=;+7%b_pq4|dJ8aSuq&@JnQAneC&42zKWsqMsuRoEX
zp9&t-X>oXCC^69qd&soZwY4<DZ|$i4m!tMxv6x-SfvXQzLR3}GF3)g>?X;j>j&0i(
z_mIbpts@O5K_JoU0}JOX#YtgT1-TEOicV`yBn5sEi%vCoaN}seGFrTi-&ovHHJhHC
zK}T(2Ytdmn3R<EBfxpyk;E>2Qxl`hSJ+EQYU%AYm1O+WgE#!^9T=wiEIAXKu95n-A
zM3(+=*IRgK<z;2zJh%Ad(*p{>r5sjxVDJPNcHO?Wq2-Ek20d}v^VM=-9}`+X{KHB|
za|CRTsj^pWF>yrKLS;cK;HAaSweh;lSj<YzY*Ck?T|Z^6KUS>y<Sd~mwTp3$#v5F&
zwQp10)}h7tz&rgB_sb?UUFOMXlZCw6Z<VF6$M&L**eurX^bw#Im*;zHL_7Lb_aYdR
zOZb)KSZ_P@VKvQ=kLLcP-R!Qu1my+qrjxVnMV67Qqi?fv)qe!pJwuecIt}>I+T_yT
z$XhT!z2sOGy;O1R((H#a&vs=Yf{C~zB8#4|?AF%~wZOd(rGt`%&%+HQx#a-#a2*Q_
zkD}Hg^Fi+X=-2HT(VXvW_{i(xqexwa)0N)dG1DX4HT#gi4x%GKFXs>cwI5orD-4`+
zq3hz@%Crb6^lIkmA#W-U<^;zL-$T%`DlvmiE63kCs%FvSm!0~sP}F5sj?X~tHgU4)
zzCRL?8M6U|Wp<w9Y;k+;hM3WGzcK#6Z(P+mJhx|gloHn7D3p3I7W1Rlee|Z0J^$-~
zlaqSoCl6(oPYLF7)}><KNzL_F$fhu!@YfE(*_l_#Ox=xZIv3i?0yrh5#9_FRmGSfT
zbrI$d=U<n)M5JKu2DQJ*J(NzCzo=39yN}U0&d*``vuDY6G2>g$B(UQ@<mSHl&x<&@
zhE5~CCK5JZI4UQ-$LjD^Y!PC#pTi#e1xw95P<iiC!d4S(5dBTiHN7(zOPS<ln9H0d
zO>7oh#2<YucmdR7Ni8ua)l-VU=jRpgM+Fe*?p+ntRAr?EPhHEs%%Al_>dd*jK34`}
zW@(Foknm2aOAy*%b(Ai_bo}v9mEi4fZ?N_|e{4}Ij&T*o(0>3mHCiS@=x^DW)e8d{
zcO#!26U~U>GMI=)BuJH(j@V2(`vv*a;3&6>6%M+sHJF1=>mVxdc3@J+^+wWdQAcJ5
zJ!;vg&&`p^rgx1MZN6O<jFk|S+cQ?SYBP!<ZN4saVm5XCCuzHb7d#5K1k0!8*;>Fz
zZf&6v!~~)af1qSOz4L33<b-?Z;aW9LWvR-86r0&^1ycEy3~mj&=$jMfYZ*N&9o!K}
z7sYKOYlPK{WYW<V5?fl>!Q;X5Bbl5&wU*e)f`Ve-V-`PqS_|yIhCDnx`-Y!!!3;M4
znA-Ovb3Zw>J@7h4#v3QvVMGY@@Dg{8AW%EZ=iPc$qrd|(1{dksfUTyq_^skYiTn(-
ztjf>YS!&M+eK1?~s4l$8AHPDAWgIiT_T}i{V1YyDr*GwGiJ-Zo?JcF(l1tY-0;{Iv
zLy7&R<T@=vfGOrs@Hy}<jlCGHmw4(%Ckd(R>+4s|C{t?96SK!~9XSmd=c1Zg>{Ti4
z^B61)0pcgHG1T%P$)A$oyjD_*dX}5d@Q_J4gH)!*t;CilN0}cRK8mFizme10O*b8T
z4Zv@ih0=Wx+QJQS{!FXRe3+1EgwT7lz0BoS%v#DF7x>DspWjN%9;6~AN$3k4B+*iW
zyL}MpW#*=(SQ3rD!0O|J_ZQ$(U5HeIlsBW7#LHh_DqA0d@pFUCR_e=YZL669qi)Mt
z)iP`QH3TzHiZAf0meN<Ly{dyn64>lpIV++jUS@`mQWl~XM@$K;*9>1ooHVx@?n+(#
z-OJnCE~JY-%uja=YX9m#*)9=gx$0J5o5jBTg<It(`mN!jA|$LF+rBN%dU=lfxvY7C
zI5&1alefTT_$$0b5A-g5pe-jxaG#dXnc>k?h!Quqor@UWv_!))V?YwtBq>%iPtGEX
zETJ@j<HbD$wKAe?HPMt<W<6fZU*)Wc@xGg}2)j|96P;dAMNvlZ0lK3wRG@0f#pzCc
zTQXHyU#OZyW^@Hzp>2lLS<mXNFYNARGAX|<G^IqiO&NX>Q|y=XHNzwFY8xmp{AGJD
z=~T#l3YGA`Epsh%a#?Y%p-%sFHGz!jqUqAupgp5JAQ;cUtsKs5;!N%3(+zOeg3WU)
zT01<C*rPSRZE!8pv=A5Bq&GXVV^XgSOZzH>uCF3Vs7j6+J=Hq1ctV9yccAbxacIex
z+j_PYbir~-0LYS`>0&b0-_G}P!*PB~p2+6XYvCjWvu@_<y+%!;<Twf4rkKf&^7f#)
z)WUfKEt1s6Ik5*9e7*SyH$OD_H%u+cI0~N>Zx_5?rrJCFXLrVYX-uw#R~O6-$S=<{
zdnFx+%Amv!*#}?+NQzkN{aMrPZ!LbcSuHWzAftE==uEE?NeueOI7Ca8U+-u#wWs`a
zHI}T>Mbja1LlGG)SRco<Fl43Vzi~xlm+VZNt5%llQx7)xjo0(T);_MZ^Ut-BPWQNB
zhl@X#_SP~P--MpHrG{mzES;YB1%b3&ei1uA)jNhv;A;2xaH?W1)z^dUHZqA~UiXPG
zP+mi5{u<iuNKGf~yDE{<z!~{#u06+jPXDyuc(#lkXfC5O-De(TIV%}uP$GwnUJcn-
z3kt{2slI7^wNWr^OKcRR_oSW7Z&K0CmQ~=CttVBLDH9aDafgVE6%ImDxbIwCpXVbS
zO_L<Tx>&aFonT-QT*v}-u9~)uc!*Q%d3_2@8wAbdqaKN%;nYGc$Lw~_t09d#(PWj4
z{ZyeN9BSLsewR@$lg(f0ZM~i&U0aE$mP*K)*j{dL4!h0+dZn2{Ja%P(^BO+nZB}pU
zkVb&&Bs`PC4iVG0vqiON+_>#$rJLkG^<ZU`St3j@2_s*8cfQvm5bksTQBIYYPXK)q
z&bmlWD9p&*D15V(Prxd^z82)R_uq=`B~vK&iEpw|2?Tv?Y}JYyegPogNn+VeuO3IQ
z^fBe+BV6J+CE(L}^RuRPj9miI5v^b2NZQFce4*?$#T>yl|Cvv>N;3BMt~nS5>C#=X
z#I_lk?jd(PPR^<J!HO!uPguo$>0`VwxLN>_M1AdN`mDcLJH>Au(VcW{EN$B}xs=tL
zY=H>iha|6qPD|6J|Lk58qou)qXZ7?=tvBbi80uG0Qq@Bzs~Kb!$m%sn^!sTcDAgmf
zdDEehl@ZSfu%Qu{leHFWBXUL8G<$F(=y9()I|z@2^OuXf>rP*39p~T-Ya3fjsf)6(
z3`pMiNmWSu$%!p`9-yn^O=VEn?=a3Tj+n>#j+t`n2f!!2vw9OPWFhSsFcDUfJQG1@
z4#%r)51P-Z2U}<bm`^Tc_QqRCKwmHK+jMM|va7D2VfSOo2|+H5kn_2yFXMV}aw(%X
zI^(a67DwHbc?g)yji@s3OL24AwZ0AOq#!*BFj;OMB6oTh_!6wDMgXcemb18+cfe@U
z8JS;Nb><r5i{k5PBtjrTcdCgLUq)8IO>3e=s#PH22Pd}FuqE;haPu=_1K;H2oF1Z2
zCx32Ui`ZeZT8Z7Cr>iJ*hPPgATEFdi8-ZE8mhw!~67j=Z+V-#A1=g0B<q|zEL%c|3
z|DdY1PioYjXO8lVMKI|*49DyrZ@@09)e+<X-1Mg4*9Io0{XIX3JEs3WIEKo*-`qf=
z&?zk+)1M~xF4dw`##iJ>?qcpsrL;S}L(kw=?d}p7$%F(EYTwf#35JFWS87{r^h$%9
zM5uK_;>ZGJh>xNI>dN>%#=r&*y)jPScCD(G!1&QGyE}v2@i|s!?b8lr<_d}G@O!%|
z{5*fS<!Z&`bawAc3l8XD&U)raZ8mr0qi$LF3&>}&)2%ad`SKWgfl&R(<7mHDcD|?F
zq;HV~sU_U_R``^d(C==93rh6es?S{%BN!=b<;@$&2%y?nh~HR=5o2V2-UtgfaSn1o
zRN1t`3*4ArnbBvNaam<|TQ%K1de6>>Fllou15CIimK}Od1W;MT1V5AbvCPrj((tOq
zVij>APhSL{OkTqE>R9qaS*+)`Z})Dss(ArlHPB&Um#PHaJ;oc-cjya_W}_l87Oacg
zTw?$tTkc)I>|6wv-b7zd8sa3-cZ5f!Vy>+QOipjAF#w>wp8;aNJa8joccma01=OB9
znFAZ!K$6h_kl^c1fj^wLPra2I&RjX9Mf|o^2VW+9T4MCn<a7p#9n#m_x5>&3vzqMU
zPUi@`)A;FX)nq0wI7~)WRN_KcFI#X<7HEN8-Kdt+h4=)^ps`PKi(jdL<jqKmiuKS}
zfwb8{IJ;N6O=DKRbIv`>%F6Pipt5&z|M1nm5fId*>3>>wbaRatxS+TfNOOP0`~E6L
zzQBbwzuL!3pzv>O!U<)Cf?M-wS4R5^b;2CK;%iZLQh`&~)kIiXLRl3Y<c}=|{Q@mv
z!wF*R(LprQp8K?8(tnbAT4<E5#_I<7ktkm}y>4Qb`>CZIN-QPFPz&P?!x6g{af|wU
zAZ=L|s)H}FKE_azI7_N}FEz$5g=s&06{&^P{o59_1z(?9-b8_G6AlrC0LBPxx)ZQw
z^~|4b=JV~$azVmxP#2iWtZ)^T?P0oW_D;L@s8@}Zhg#R}sQ*C;6B|tBi{)cBGR<DN
zZ4I6T{H5gS?39XghsDhfQe2##qZn!OXQHz}Db-pGtdE(~1wT*1R|+>n>lnP`Z80&i
zf;+X2RFmHcBb>jtSaOZ04DFW)Ffqj}y~HhhA()Jwl@Z@D`~Dm1O@N^={1<@n)q44Z
z7k=Tz@1%6)7+)qPj>OX^0gMG0k-W30r7uTd6N&R*0Nj8WC=*%r0rmMAZ|gjxS0c1$
z>*DL#9S9!gQeNeq-h6XBJdiT;j91auhS<1Ze-iN2fVVegi7ZaNcL9vTLHBvJ_Li7M
zg*K#ra_$@J>w+pYA)zmeDSd~vLh2pkd%BkWlT}ld^OuusSe!{LOVFT+i1OVK0z9uI
z=lmK7&vCRXk*XHaiw|G10HXS>oJ!}pHFni8`k808l?EwVsyYnevTM&GnMCR5+^#D@
zYqd0$I2Y0+o=<j={P~}8BY-N7l3VOmMEKRJXy$H6bi0a_C3mW+Yq{7EBf=MeWrUTw
z^VIE7RtUgA<331->Z5I&FH;@X)K%^OVt1zd<B=zNP=puAIybVXx;=<B@cPAlU|=xd
z+6TRv600=YVzEXnUt)^BlmZ}p*28&;?25d9pN=m>^yZh1JV)9S=T{~U@i(VLW`sp;
zg}U<c+X2#<v~AnA!glw!@R*LVR!VI?!@S^bx3x86?InknvO&U*)q!yp=2Lvyk}oRM
zrN4C436g}futq`n_Nh;5p(Ed{`wN#8NmU|2<Tr`0tKpiW#)T^vj$hq6QLl=TPdr~S
z94Kqo|0<6|_26_5UDR@O@Z{(M9?~}P^z=*$oQvduWpz0G10!^4btX+3y#<oG2u{zH
z6}g7*<-{y=bLdOBC<zVcZ})szU@ACLJZMq$o<82mS(o$K*5P*lYX?Wi#?pvyXnS4q
z5-BYFv*6qIn<J0|#DaHCKUiH<nsv-Y&--F4WtQg#6T{iku9v}NpvT<sIpkt6<nTM#
z4#3*~<IjIZMSlDUFoR!UroF;CZ3v@2cdl~mdUAwIVdbUwa`rlR0z$WCoxbV%I@Ia?
zGj;ORTL5H;<!%kSmGVaj3Z)q57~EN!+KHa;EAG`OHfgPUM*pR^v6Ej{3rWVj0Y$=L
z%l{e5r!j5&HlS>Yk+6IjF6+{__wwb-c)0@AKh$0Je~E}5GPPwd{#O;z*cU00=&SE7
z;J0NgDwkK^8s@I=zk$Ds+S{1}mY~j~2v8#7HR<jUbYT*-!r+sIYD74i`+ImP*?aT&
z4jFfPOle-1FFB9RhP|uwsZR-~)JE_RaP>1hU1lt>@&LRnWKCXAvjA-0Lb5pAEDra<
zJihEwzJMJ`5mDj3yfwvnXUz-%*IL*Xbtl5Q2#a+Nrp4z7pI(v)<tjbZv!4q{_w%TS
zp{53T08^MH?6~ouPGUB@2#X8aoK^+8Mq_c_J=t4yv{`Tlo1O&=qlgg?`<|56$bwc>
zp(arB;%af-!+fp2sf+J!A!_Xxia#&WoiD={b0nULS<=)onMXKalL;#fEsIoCw?uV_
z!07Ionb0Brp>ty{?Qqit4PI9z8b@&X#-RiYkw1E5F+w78v_PL9rgbGh-9<*mv51?Z
zfkRS@Vzu9jU9D9T0yu)GePvW{H}1vd&z5j&#@o-lE=)Gb(sj6HH7QL%e)_Xp^KWhG
zbqVww7p+o~`9j~yFsk}=zfYGF<76eXW7e@8VUO^!G(ok>Wgbm5sKKp{Ay#k9;MXqr
zFgr8qd+h>ni+7Q_M1JfllBn2@nYqAtnY5N0`(<9DOxRNKEzZX|Y4I85hf|1RA7k?d
z`d82hyEXNul`&I|&`MfLFRjHR=;H;%v3~UB@w@%}6d_dTB6c<Bn`b+{VA7fy=fdCI
zM5tD}=HH#!>9MfGI;LR0&%3wIZ$T9<*BmIFT|IifbGhsgX#3DAKeG!y(28KQ_iPy-
zjMpE%UBOiTAocC7oiSqJ)(VHmo!G?!J{_gPwITxMbgtuiH7(tg5;(<L>=1Wt9l8~R
zWDloO9y!BK>K8L12N>&Nme>>FREK~W6NKB$;KIEbLeGKv6h@r0X=bsYB1cYzy_*5e
z*S7!elWpvaoiA@5=1o*~yT`mR(_aCmJNe>s<Q42%mmEW_y{VKB??qCDxI#{Bkqn((
z`IraNK2BaPvij1%tQ+kDjI<T?ET%r`NH&JiTj(N0ZwkHBY?L2Ls{ScUjH}%Vc=k_H
z*N}A6QspW6OWA8vf@kH-USq0PZ41VS*cb95W1IBG)i{4RX~@RY*=q(mK*l*Ag=CAf
z#f^VYT8hWE^k!W<bIrGkc-cFd)b-T0dJTDpvf4`Jf^6@oZ?`(Eh5h0NUW|p}x|@|;
z1L>uWZQ6&9&&mpJPpjJCa-zjZCceG~KuG6ay^;Gyo1E{uMo6h(PW2h)wUqvJSS6Y9
zmtuo-cJbO0Xv~cqh<+*63SKae$ygALw0j1!L#b}V4mWmOrA<2sZVxU;<sVIFk;bC$
zq6Pm%0$RpmV&te;=3TGql}=QQq2c7cvcUY6nX;=dn18a0&RKvG&?~!|xj)y)GA_I~
zzgp#8_g$H7!Ro{RzvYoZlQiY?ajPyeCZ-2AJFz^2=an7!ISYtCyC<ygO58uM9(k{_
zdK32UGg1?|H8>u0+<K+#d{wI3-q8die8N8dgm(|uXVh=1(FVy=_{(Z#Z|(Q%D*fpS
zFw1~lK$ZZS+Dkm%8{8=X$I>J<5)Pf?-g4m$Xi|h*;x-u83#<}+RZ4Yo>fU)4<H{<v
zkDKfsZ(~=td;G+0b2l6MA|%bjI@Wnv+4{?Gp6haDyFeXRSeia{{>I%<q(@UD@)=7X
z(pt|G>E@qtpH8zT)-Ab{##m&Tq$i6Feq|TfrZAm!t1v^E;NfLjs&deGz}<A$u3bM&
zftUs4I_*A|eq_Ki1@=u;&&bIBy_x@A84GNXwGz3b$Js2>F2uEh8q(R@3#hf=Ng%nC
zbR19iW!yVz5`|JrLNNU21F^IxEHz<i*aV4$L|V)jtPD|tUbsD*=r5NF`uUl}YLTip
z<f&(&u>Q$xRdFD+9d+7=r75D2M&`@8Ku@#=bTE$n?Wmvt(dj8J@yoIi&ZZxZDZY25
zExX_qAZ;NQl=2C8+&w#~P{}gXkJ@a(#c8?L0-J5XS>vpoezo4cVJsQjpL%4!pPv_}
zj&F!h<h$dWD<Y5)5t(?oWDasRVwD~5r_`oGYbjgqbNiBSURk&____K2rLF$zf05IY
zJRx;4q~iM;n9DWnK-ZZweP>7X+UA9KTP-%-{6qU2VsCNpqtxrnOhImDBR|&PkDi0~
zt8y(Hrp<GbXjU>q=s?|ppVe-*>&^RyZWw5>D(><~y2KQ>BTLOON<qVG%eMw(7B=sW
zqX*E~M^rJT%7AjxDX^tsU?LZ+^&bU0zP#GeJB08_`dWUBu&L!d#buDYo%z{x<fBW|
z-j0=n$E{3Y<ZxuTCFZS&j7pg*<L3cWVniTii~^y}DW`Xipe%ZiX7eGmVe=IsBNP>w
zQ4q%kBH#zCOfo(X?-$%YmO@re#*{|(Q4}t`Vg2BBMWHJ@9+c-SSI@4gT9tqq@}K0{
z?%i@$CIg72cH3r8%gW=X5zBEquRRxH^c@)a76B+<a$m8F@7fAKVn1czo+V~$Tv(z?
z`3cjMl@XGSR<OFA`t~??DdPvP$i-bw5Yz+^9=ib`gWZt5l7U!PQY^y9VW3%+@(L!6
z#{6u`UFiI=Hq2iI=wk~WS;lt_Kq^^+LP8G9W|}E6{jo1lYHPG!h5#R;?%l0&k01A5
zU#?!7MeqRv>Xl!Uzitx<TA=sE1~5Ywi=R?3v}7PFb5mK0|Muaw4L@@%SE9YJtC!kS
ziuF9^M7B=50y<2)0|15HdaK}$8sNO^RhEmK<xS3rywTFTt{$8AqtwFFf7wJ`%XTN^
zcM@QYkZ!<;Jl=!8x|{vC>pBU~G;!M35=L_daiXn+pj9cnTx;LSNop}IQW_mqH(9R9
z)ob_gZh7%|M*Q0!curL*)1D0D^vlirpr~X3n*~enjB0Aqb;C-T>V|ym{%ZFWL!ad?
zw7nkVQ)J)V*Spq<bZd*5r7kCsEAFc8hK_)N;NY>=O)i8IWf_7mqC}-<*rAw~)t4@H
z!*|e|5*ISfb|D_50q=LM3?(JAM>w_ZxLqyj=yP2;K1a-T6sp9d-}LR;4*{jf*E|_o
zWPU@8xW$XB8Wr7b&6-kbnw=rpnIqAnrajSOx+;@joQ-J#Z!#C3MtFHEG)*HdhF+Ra
z&W;H2CAzT*Bmb+!6le*`U(3++D;qA(zTR3qvS`^GBw*U}{Kl-zs?uu#P0runM(3Uk
z@3O6k?32G(JkWP@^6vPqaG4&NrrC_Pv6W(b-q>*FPg`ER$C=g`maOrx+J>z0?d91*
z{2LC9+(S`)=?;_k%E@?THLdbu+|5Y4AYAvvp7X3@?3OTlC8oMOn)3dj`2zVdUg3iA
z*QNXKiq#GOQuT9-c%D(w^KM)doPSqeeMV;4B`jCgBH1muDnM25kX@(&4703y?U@9;
zQeucfF(o=N7o(mI6Se`M7ifs%lHS16-le8)C{RJ4@HdD&Jk=OwpR&^Oephn8yKBjo
zy73z44x<3|m@Y{XX;Yx5WXUwbQztv*tPJnw6xnQ@_&CU6H*GH}FJQV!!$?HQQDy>@
zCxA7uA%?K;Ie0SooE{LqPd>2av}tArl9=Ju-PP_>pY+k*-zU`Dw`JZSrxW<fr_wwh
z2NzxkTOMzP%sad<`pB78WV$QJI$S0^DXXR|Pgo2jt9pDnpqS$Ky})s7yBthr;#I2Y
z5l+<tu@qeO_kHL~Iy%$?(3qs!_P9faqGtQBeoYc}Qo2XPWj~i1gt>n6xa>oyOXfz8
z9u3vlgVY)wf2A)W|MMGX>gtGG`qHBr6=8HQzlUo_`d#!T2`=#~kSB=kmfswE#v@A+
z=NQBG%ol?y0n-|2mtxwhIl)18y9k`~_1S_+e~y`;V}ZM(Zpv^=o841S<@O>bR}z;4
zDRs$-%l6Z4hc-3+4w6Q=fgLXW-eeD&^d0L!%9(3?uB)Ic-1=L$UFcop%?DOL2GYD5
z`X}&d0D|NutySg~SW~Ppwl;<nzmNaMCJ18P^Am5iuT5+R<FS6w@c_yaUz}jVo?i3C
zC6=~*%n9k$C@9e~mph2F4qb?mWd_AihdHWM3Fnk?z1;MaEZVe`dq@hm!D5p=Kc}T1
ztr0JO>3ng0+@Vcl3gD(4keT73ru9g3lf!A)m*MyK72jB#N2x3fuuh1V>DL+oECAgw
zCG6`Y<KtH1Aot22=VdI1vt#zjx>P!v*gxFkJ@LLh7DJBq`&6#`tP}&+!Pq(%8^;K=
z9_hA2M96H`4{Y(XOTH_0({g3JJ)+!#W>Wm##K#0PuY-6|o$UlV!AfMEOn{8T;$`HT
z<fncTo*zMd?1Ge&7I)9ztG5k^mhCg*(^!$7EG2#5#`P--ii#Xz^#aPv#+;y+bZXam
zERb_3$`ZR)=&USHNkT7nUYv9<t~VpUAGd2hk<lC3)G>i-pYfPKfNYJ)*)>RRJVeAK
z7Zu5iT!%cPK`whCJsoLx)wOaq8^7w;mYkz}sx?1joI$r&x3jTWc`$C<Y)Olb1zC+g
zDP!2_PpZ_gOX71GbF9Mk;(^v%=9=x><zm&JACWfwampBS9>)2Jkoj@f*QH*=TY}54
z0wcv0g<ay*A&Q3G!)r>zE6)DX;Pe6q8*bYbzkb=IQRs|s$Y%7;@oTxroQ}@ya}vIB
zee`+!%RPaCG=f`rZx!?74uVQP2!=Rtwjb)1#?Imw80>s4F~s?@`jiy0uH&wnE;4pX
zcgLqPE*S)>K=-@=m2weRuJopza#T4~KQSjKd2^I&PSIC8B$#9zO=tI(Cc0uq_ca$)
zFIN?aKhaAp&QV5GwJ9ymBUdU8xVI})Y?{eINOA>~b{%BptyiSv-q^d>DQM^UFxnje
zZP^!gO-G?#*gRfLv$;=RLn9JnC?*vBN+Xg_Rl!%ulBhRXtUKlpWRrhbKcdQ+Q>o1{
z;~1YGi$Usv)NzYfNV^_R3;&zI)goZ-A}&8)OK6ON!do^ZjDPA$%m&7HtuuKbO`)Co
z=U~#FT*K#U%w+z`Ou!Bm=dQ}APi=A7r)jBJy$woJno`hs+tcuF^JaYE_VsjZZOb>y
zbKJ^Ru223_P|$|pF~><=xcbEjOYL<Jn@rFtJw7zZ5-h|A0RI15P#ob4_V)Hkumw%)
zA>g24!Aq=RFRO)a#55~Wq7-u%j+%M=D`6B@i@7Y^L#;&VulsT#`7m#(uxXIzZ0Sf-
zZhjDuEu~4dO+?tMPLIr-1%iIi3jJ2-J>BySsK_-2aM~}<0cZvo@Z#>gY3=|$tvcoq
z6sHNsW$7!n!mUTVeZ0p^0k~{n#F79;4+6C)H3k^|*3-SbQT2Cfd$^VaeExpFV|HFk
z32CrY!t~P7e=Kmq--fDx<A9_qSQezeGrj17bK?u6=q~%M=Buwb?TwykabA&oC9N1`
z21G~r{bLDl%vJi^e~D_mTeoL&-uMx!$ufSm)U_w&;<oO)8&aDbI44gv6fVUtcxtlx
zTIV%wz$6|NHQzh@Bl234t9i0`1hlRM6~3iFo<%Wx>kCaQOn9IUKQMIwx7$?3txYw4
z(ZhFkOnN?u@Od_q-<CPw(Gy}WdS8Cpfm3T;Vk#*%=CN;+y6~kM=aK);Kx$<|UgofA
zp3^^Uqh;lq19$7i^s;e*8loM_Tp3z+rW&E94W3v<XcD?60~K@NsLj$98=k#glD4cC
z8&%Dmk;~Bs&FmB=FOWz@_-QGXxqyx|&Hd&&#bzCRx(l1lWdvUwo-l)HClxwhENYQG
zzS~nxfoHCn5FlqkF;Wc`>yJKW<pZ?1HNbV3dQ>Rs-W{1B)?kA2tCg@N&abYGGtXmw
zN-$%>`Tf2#%7_vDg=YcW4)l|MH=F$(ECtHX+UL<=9%{H9ArUaVI1;6Qt*wsOO(5_)
zVV9C$MyEfekqAoXQcfb&H-yQBwhA&^gLgOqq*r4fOWeu=%d<0=tXRN)#h&n7X<7T`
zsSED0EN{rVNpWmAemsTtgEbR!V^?LxLpiG_s9;3Ftc@a&y39d)w7YKma@k}SzuiBM
zC_U!|qAaewlsLumo3dVRa3nZfaq;?>7%`5~H}l-|q)y|=^U0)YzF$B^lzbNeD79}P
zEG<=@m(5i$Wz)|^{Ua(5lrrf@j(kfEr}@r47s+4oli^z*B4^|^H-xgV2;c;fk&`=8
z>AO^4Xe(qhZORuQEc2dlL^l9e&Kez^`_pmJBPuH&MMg9L#!lEj-_`H>3=;(UbZu3Z
z86_jxds)7-yhy|{)Io9in_sJwIP#E4Onp<dNTCZ*5I^0`EmI3b5AmC&E@~$1s91`5
zm<dRTNI-&Ru%>UIOZNQ!n+GvE|Df-5o^1Vvk3tv_-XKGNosEj*Kaib&OWrIjqOmkg
zEcrkYKoH7&7nK1j8h4a6)nDN+44BHv21JJaQ{1kO6y?A>#JWnfAk-oa#`{k<|49~p
z7LxuAD0BW7%)9^2lKcM|Fueg!|0h2GB_qzhn78zjW#6=EN}6o(UmUAl7!@g;&(h((
z<KQ67E%a~5hd*l<EAu7!*=62%)}1TSQs>lb!QXxNJZpdO1uI*Rwy-3LHMb%RA3<sR
z0Q~;H#UT54v+RHU@Bh95XSXfOLGy<R_%AE=9){H5mVe>J{=W{Kf91ewJdo;VAqt3a
zOT~(zp_G+*B;p0jiUG`mkazzF#@t&&etO(2`A@rrH_L@q=}XbznLYAwn8re>*sQWZ
z&Nz5y&|Eci>U#c<$hrTn4I^a3tg(-En7cNH4!sTU^<=n<npr*#&~T*bX&o-rXkT{O
zrz0@!SY@M0YxoV4e#$C-of;mSYci4orkZXQj1<9KoVjJ+BX@Jd)6PIrx?oT7ot)xf
zb2shl0ExLErqNsKX+PjT?(zrn$70PLCnd`~f$JAGn}%)+fW0?!XF-Lxtp@_8b<ysv
zH4OUa{-BY8<B(k#D|1SN%;~R-Ic8#F3M>{9u#cX^L#UO^zp%n~1jCXjVo49c2;OO*
zQ=WgwKeTuA=FP0csR9ybq{r$cGF1PXaSBSUYPy|pSl929F}3fTYx!u2A5C#68KpK5
zNXoiZ+Ll?&78jJy#a{C$bMXN{VT_n{wn&o)uUPzY;2(wy7D+3b%x!?aQ@h~T8Jd!c
zQm!C>BPS(v0y~B|>sx1c+Q$Wtk5t`O4WjI-yvxpd-(q=4_{P8U2IaIVxr|z)Lj_Nw
z{HPMOg|_CPn&N5?^aM>S;>*fCw4H}wx-u!Ef0b-tytMk1kSIcR@KCqBnNN*dErhJj
zO;y}A6J++*+`S*G61`DkZGpK=;?~~9afzp6O%0wv+?R9ObkFWXzGpiGY_oRqNXzm^
zhU>}=uiUCA5&+(f&m3-{?0kNbEC&UO_W5RL5NUJw{h1O3L50Z_efo=26;IvWkv7(v
z`+J~<h5=tDbk-YZ&$HxAIQ;NoH*ni{K0dLfBY3PeQP%8%LWq{0;FBlJF6plaKQnC;
zq-_yWdziZV`oO04t;EIYc74X?jw49|V223h5;2jBc+$vcptYEm(J9^hFg<;yJ$?38
zs`nPjUXcEGJA8Z)^YY@dsl1f6-}pEU*hr}Yo1w8?04QVQmD|<!v03U}32o_ma5)HO
zhYK{yEdSA!-BrhD2&qheNYZ}&80~Y6mmfRyRwbm4%~D>5p89>JuiD85s!19K#+%(!
zWrDMvg=vC?xpjx+&VR+@kFp-hxKl_!7#hv|yJPQ=hN`JC9`9x;%7K(G5x{zC2#x&)
z&fwyC))kw?*zzAv2-4%c`S_X&HKU9yC=ub7Pd79SP}dTi95+&ZL$-Zeg6(22aviLw
z%|x?}9Rsbg^jmVXuO*?)c_50H-)IJFnpueUUxXve2EDpk-CNK1+C84Y#hUHkd04c8
z-~801XQKMDcOUcW-e1;*!OB%@D`w5T19uZjJRb)I(0JLK^b&Z_Bs!~dkVr*@E(W`m
zD-hIh4MgxNQyo^tkH<E3jM3&o)#}BXN~0PZf>g=~Y;mE0aor{>`9U=?-hqojS4u|T
zDDoP9M4*z~<nAd_20Rx6n}k?i26TMcFnv$W008t`Ho@WWv$uG87=p^?a_QgBc~MrE
z@H4uzJ`-CHHl3)vI`EUBLzAC%gT`dk01tMA>nb*h)L^t{P4_s4Qq4_l5<#il)8f<-
zP93JllW>2xGAIZ7)HC2TKxzDzbTHuKVk&p6#p=k64}+@PSQ?|%m%8DWkb*o@S*+j8
zx6Z`m`b+b;ARQWKum>2c>|WmWKISt!)ods6JmK)_6c$0Rx$QnFS&ln8^vl8^0gdYY
z*FoxBD9$0ia&^)2Ti0=qttlb~>UakC5YqS~&k*X(`My-z%RgkQrsr7n+d0P*6W@=U
zMKYb!$+vTgJs;LpczcVt^2^6|t4Im+dc^H!6MnX?lVMJvfJ^;?d&vG@N5H*}59O42
zwpA<-UoM7E_c-u##@<{hpF^v9GAofdSJ^x6<f-L?ogG9g1_W|2e;P2EzYJLDZ|lB4
zscgrgs)?ByE{1K8g-`InkMSo>*(F$<ZDFY^T=>a0b8+r8XW)aB)XKCRqAhYToVmD~
z?Bx8s@Y;G9)P|E_o%;qi3VENt`Lj*~tmDxx5~_%RV{A@KV$txf^${sBnJY)RQpxv=
zCZ!(kQI*&pyuiA{<v<ftU{9HQsd-$Zo_FvkLz8xT7VHWMOMp2oZs!w3CCRKpbnGVX
z@qs6=9iQ8WM3@!{TTq)U8+%WY`kb))fU;c!BU5~rX8S?mh$;Wjt80gw{%{8X9^`z4
zX_bwi0j)sA+jc^LKLDXLZOl396j^Fr-{!YEwR5pJ$Ln6|%*5<75H91>z?TnVAw<-X
z^pv{D8D@6W<u{2m$%^fC5)ys_=>Kg|YsI&U9B$7H0DPPhW<O?{ea!_i(_bnZ06f~I
zoAm6!pv`k5$KbWKV{b##PYH(p&BtvMK)gpI3!%?>c6VDwlvcxa{-*hFAR?IIh`qgL
zf#yK-kGJ%o-oDq*7bLvSmZlA`xGN&Fe`oL$8IPs1r(1U(4ucuC9c=xLrSb<%fwdB;
z9J|*(sgsv7=!+N#s!yg?Yb<}wRuN3pxr&x@JT+;FS#e`Y-e*I|OF)}+hX7KLA=GpY
zKm^v?wk_}GOt;n$PkIp>obw@w{$!@3q`TcOfMuR=CvpTGOq3<W5(3Lu_A3>7Y3kFM
zn62(hv6%fNS~JHFigt1zjsM8ox;Eba#XJ^J-=aB*>&VNizcxAS-q<S3v?=?Z#AEM;
zdLAkcvx7~W5*qD7_eAHPqs%kmYKBkd%7|?%pH)}8zE!$e29XXn5fE<eJ|SP&er{*o
zNNKrS;edYT>4LS~Z&ufh=EgD~0vqe3aijcr5}G(|$wYp>+Ga@~Wwz`I)sngb071)e
zK%$MUpV&2{r~TErsz9M9082Yl!&B@z9&v<=tEH*Nz~YclbOOO|$qB7>JA3i*5Pc5p
z6SgudTP36DC9a8_9xM>x*3Bdbp()C1z$gF(Uj|)|=U1>;5_wcgV)6l7@y^rQj}4w!
z&=Y!Xi7ffHk8RmWbMv`Uf@Gnxxv{H)iqd&S31I|klAcY6pb(Hh$36^J`qtJk?$4OT
z=fqrXV>v+ZD;bg3T4F*YOrylG2qH&ev$JlZ*ZoJsl;j~*C=9HI5=ZoznTW^X(>l3E
zC5y;GU9@e%0)WjOEA!e~E-m%STs<&gwWH-|5MmN;Cw2Stx(q-6#8<GSP-UjbfkVI6
z1&S(vfd?xZRK7CH5SP|LU+xkMwERqxsBR|*O`jh`s7DHJSfHDn8-bNmZ`)_Vbf0g1
zW=Th`lCpic43<^K9q^me<XA4_NJjtbzr$=`RB6d<5uD`(^YDWz`7mdZ8x;mV6;}sX
zlKv6aOPadckE|c5t>2AAAqjy*pqkOSzefM{+Hm6yg_xGFHf*84vJzSg3_ioDGy$~G
zXQsXv=etAcBsj1=;PCYT4P!;k`z<a*FiXbUJGO{tyEB^~YB&>?^;q_GMTjRH2>7m^
zjD7?P+Y`l(dpi<7eXegqOz9Wyj}lL$bEAT0qoUJJRwHLN?f6X6+Of%sB^G)$Ng@H)
z8mL%VFojGx-+_5F5cGjiKWFy9A{PE_DoPWDSouR<AItiQi8$*qjlg=`@b#XPg)YEc
z_eF4Wvtjm7!!!XiJNylcAT*qUjsR6`S_ZHayB8JlC7Syv(8AJ<vz99;Ged_IeaK^`
zY*sLkU-fPPG~-G07c0Y4cKz6=wu=`gy*aRd3gBOH@$fvy^idT*x85m%b=+N6Sd2~h
zOGE!`cBooJvDB`F_h_tzTfpGt(&ic)(69)`wxQz1&==27E-8SV8?gSrR5BG?-`j9%
zJCIeR*H&@U+Njb7T~78i80bS^qa>1@B2`R<y~FFAFXN}Vg4T8MJE0|zuCLT5)VA>o
z7+Gp%?>ujE=qgI6I{#!~GI~Z&1>!;i)w~^PNV&j`Ff@EU;qcuLuU}TDWX%B0{0?Yo
z;r=^_M-OP}R!EOu<~HnR>be}Zdp(AdJKbmL=_o2^Z97vvo$`(0YgCU>l>I@uro9~d
z_1?a#<_@%ykk?=#hJLm*KCpg++_C5|b2=Qqbw|R~ihW@OA;=#vp<9t~Z7&8T)}GjS
z1tn0OLavB920aHBrk~p@eRgw3+^0`oDT<r1EgnZH$@7OhsN{(7>u4`8g;;6?C{KE`
zUAPV|eNR^+LS0wkch_?_-}d#VBGq@za*G=th{Cw~JRSPbH_aCO8r(h}J1Y>@)%KL1
z!slN;GfGcEtlZdjlS9RgMzBmqo;s0x2|s-W$f=(j^w#bNNSkeQWzV4bH}?L<jVbu>
zOL;d7eJ?S^vx-VC8LzZc`+8YxPq}co9kt-2qs}1a{(#n4eY$oItf-`g-#DJE8n1JM
zv81jt;a!21gKYJH*np*&J>1>2|JMR$O)2FoWrCfsmb3U4y^4T-gIstrokpo$cHtN|
zMYg3@{sImFtLMqml#^q1H8jSHqS6u!o|L%sn@m{xL6Qj|uI1htsQZwbP@81CnO-sD
z*{JL-Y`-Mr4dn{mGrw)a+tak~i~7o`vIOmr)ftc*!<yUr?04=aJkP&$8s+ode0CbD
zF#t*LNNhEr$S}jE(&yFmKk5iKbGPYGCs|(t0n3q6Uc~_P<!|Z?{jjLW(cR-&Feq*h
z7{7=yZG=e@A>RC=tBv8?AqDBEQI-rnIb;jebphO$OFm24A{Ddz@;UZzeeBv#W{z_(
zWk)m3{#d)kRPj-s<3dP-ZF{q>jKT|cs0(m&R-d*llaL?>??xs(;ch*dtG8U0CHj|K
zoPpszD<>D1OpxmIPbaUCtH^6no1rcpu;-0!>>;mFhIdXWoQ_geQC1y=YP`Vt#}&m;
z#X9?N3g<+m+b;jW5exBYQ&uzhYQ;Zf;WrWz6W>(QTI41(BGF3*u61vg%SMsLDYj6J
zHh81rqF5Rlu{<#rlz6MJ^K9XKr`_WPS{IR%*VinDZC!V3^$DoOkNnb}(5Ef9>-n*w
zIuxFQowofUB+DX)>s~&4RDEu3K$h#nWaG#(>|kei_t9AMWs&)|QtWwx$I6$Ei6!g`
zKZ)<OPWhj6=U<|29%BpGZ6%UFHtrPsgt=Z|8N-ID!;A!i?QvC7Ii7g8U2|RT{O=a6
z16mgm!}npJf3hKRR{!*OZ#pf&sqNQ>mWTi}MQuf8F9*stT-Z{k79B#OeP<uyTpVi+
zWiS}GXnCXzMRcJTlb)zi7x|<8%KB1-#w9H4nf5I$EiIMjtN~tQA6T+PWnq}(%WUbO
z*SA@e>T3E7!-njM+sX-9Rh%#O^$J(;2)uKKYO9<34}hAI(&B(;Dvwr7SW^Gu6roJi
zg8X_MNU>KJVwuV+bl=q0I%Va4Vpd{MT)0qk>dQah7-R6d1sqqy#Qpx4(q?&Swnbx~
zX^B$QFDbZAj~9j#@T)PuF~(vo{<c~W;Zc)bfOEjL)<0JmDp?v1xnpI8keMSCivU$P
zQDbc_?XvlN@84zNxplx@`|#nzf<PmLsHxAT63l3N$eqtm!sj!DlDQYh+uKWc&zPT{
zd&pmPf~ERi6x*j-JsUGIEeo(`axM@FK~eq2_NfPwwJO0<6eZS3z%Gt0011izd$aNr
z{UxC18-7)ET4gDxohNR`Rh)K5UMY{L8YG#_ilp_`f`Eu?v(XD~lvie%sav)Dw%=6d
z4?%Un^#By%No#R(-nC7`cf7O#4Lq5Y7S7#MU!6#5EQL1K2>N~XMYq1LvY08K!sRHt
zU?6%sz%4tJEcOeJ%KzuJSbpii|E=^JWQl*;=D#fl=W1f9x!18;u$Br4GN5CY2GPU2
zW?!-6-8y&i=Yn7?NaX*j!T$$paFCYc-k2Dr@bI=9^VTQ(8Wtr5+%Sl6X(h$?|7!s_
zw1?Fc$Nhr<JaeGLjB4rLeke6OeG^AEWVH;^?AQyckXPL#Dag9W8`V<!;-B^3Z8wQP
zNG^TAYc((`t)M8+Bz`ur2niiyb;(b?<jhtdrxs+wBbWC<Cs|X)i**gSM(pzSJ|jqP
z!!W}Zml=V;FIsoX4+4}ALrXHMWeo9l27NrRD2D!j+B^4nru)B-uS;FkrAt@8j%XA)
zlw&zXW|d2lN<}21laceO9EPcMse}uWLr6|>#bV9bbX|%v=kw;U5VM#y#+V)M&v$fn
zoqpHvci(^AkNf`p$M)UKw(s}zdB5MU*Yibr)lBFOm`E*R^HstJzP`bF!)>19#;iWO
z=vUt?-JgtIamrFP0j9oMpTCiDzob4r4U1?m@CY(<UF?n|%|EodAfbd|PrK@Gb>-)(
zy%~_^_!8!hik=+5KU2fiSs)+cAunu21`iyV)`B%OfT5Mo!OtS_h;#w}EI5LqFKF+b
z#(R8l*>D?Z^2T~<v<M5Gk6x2S`8AM|ys3o3$zi`{+fQ>`tN8a@uCnV}Pfbz=C3Og_
zQrxVEfJ?kGah=j6g`4FtP!reC6-b0CDWvuUGgTBb`hxDqUobAlJ}MEscc_tE^qVuL
zm@)1%3>Z3MS3UUsLs+Elf|c665qr<mgd3-_>Am}Bc$j4HU$)I{hK&NDSL2Gfg%_Ra
zg2DKr$p8RclaZ2ARj)=?X*KiT9=JUFtw5o9;Wc^&T~{)7JH5f6ibbPv4=W3r9@Wz^
z(~qo^DrVr)QO)+};4SlWHAiM*jcSdk_a~W1Uadf!Xy?iN)Kk6Z{7Ks_NM1+H{R@7S
zjq5{3E6y<~YQzR|fWX^mJMNi^b}%QRt+R6z(r*BXT2QF*E(?PHoUc_Q4R6s$+Dq;}
zL=EB&2vz7r+4#}h4lDKpLCi(5qj$3GOx1$UD~C*5dl4BmN-6j9n%2PIHK+IM+G?MS
zK1RH?e{@=)res#B-7ncS0K9SL&G!Q8HS0GbX9=!H@)?ej#dJ20Xf={Tt=UyV`83kI
z_^NyV+{=0(wy#pu=3-l<9`7cTq>1)CB1BQ3l#lle+n5QmWt-P@`PR&^pVGa+j40oa
zAEK;(WwLf<oD6tdaZp=o^(4vP-XOWk!nS!~9*s*%>JW_MNt36Ni}IB9wexwE#iX=g
zn^J0Y)Hznz**3rWif2<K$rJ(e<K(B3D^`#H5#OCKUd|kgF{InE9Z9;!M8i#wk<-K+
zOc!W#oj)0*jb;s>Nx4a`rV+*$rlKzojYvzHEs`k?(Kf8GDgXERg11uWT}=^N#E=36
zX!$@YcAI+3*MzT@&dgAFT-i6|4C<O}>l8`5Psy&Ru_?B|P1`&U<$6+FRqb}I1GVob
z`z`3H;2jv>*EEli6E_mA^}-!T>IJ)-=Od5}4W0RZ)q6|$^<-ChM@o0v(9@Yp(n!bL
zYJQ6V;W^lXz_2|)M^I1gnYKtgDyzNGB6&rAs$-{L-vzIajH*4v{b2tJSp$F?S00Cj
zC8BM$#K5PT9_iEV$lqr_;`CcJy#r9wiyf`$6{_jAqIS_`fy^E34HIRj%7<}n7%C?y
z((pIeioKfZ-%Sk84UN|ritAbIIdqMZ6}%E=^7mbNRDedG&H0f+4Bxxargw{5wDh8n
zZ-YEs%#VG*K%xsCypX_T0=CF95x4t#Q5fr1ET|LUUAOr0Cw@h{{gn}C8PjZKwL!Q*
zJ+)iXu`E%(qzcxMmgRm|6Er#i8%VK#30DWYY5#+v?tho#{J&xd9IIf!tU6caZ$h}?
zTV0J{jz|l3K>jqyckr>~5^vyifdOZ4AMFdath=KUaf2}xy`Q}I>sog9Z}jyQl_6WY
zGHu@}3_Ow&fklEf?#Xw?sX|5lZK0w*26d<L>lLj|V6XIz#@O>8NjqQ?KY~g)Lu~0N
zS+K+@b^=yeVT^T#tG3f4=l}>gmXV<B9-T(-lSw|(-QoW(b}nW!%;`I*y^<OI;p<Qn
z-Pz7~q4AU43$fNDwK)gR!cb}8kr$w9VBn|b2X`X2jM_vMdQh7|Kcw#|7OO`23f2MU
zX&2kuFL_c8nD4;C;g~u*f3AGE)3qw3wytcpI~_HW48;23rM%bWhOowMKm}lO&D}j}
zCN1dD%a<h|Y-Aw)Tb+^})3mL-JHbP|4ah&z1>BlCD*|UW$n<sE0D5>evT7%=Dnd$s
zq5p7{)girgxj^YjuTe?+6o#9|7Y%q5-I#NJRR`=N%GiS^iriC8T}0G*;QS0-Yf4=e
zsd@;@k0eUrSIRl22czbClOM)_QB(z}CIP}s=NanF{ZZ!Atq7z&+Lu;D)78qvfqOv>
ze!O>h?)K>Dt(o*>;nthHC5qwf13Q)VukhyPsR87Mdem0aqjt<``}+>WiejdJc7(!n
zUbkPdm(OS-5K*Nq8Aq3~X3xO}nzl;Lub}ck{;CVJLhPbTr*N+Si&6a>?t*CXUUi*y
zVuCZppzi@(2VfBP1}L1ssV!_}oq}d+pHEV4OVl0%Iz07sp2f7vD_ipd%PWf|1y>Sw
zB9Tk{ZeV}}GIN`%UFXlAH@5sC`3DSVzD>lZ?iqsyO*5hf(_GiJzTKYk)$s_htvLcT
zL<+%XxeWTH)sP73F(g6~p|0G0NL^=?($_2yL5U&@{!%Ef3}K>u%Z~MpWVSOOJLPYG
z<dI}&*abg5FqeLsF1SWm^{ifqkcLGPAAF}if+}7qM{~*T0UShNk!mbUQa+>=`3dl$
zX~61!@%(mrYuPHL!33c08~m2>&NvRtIq%OG^w@&wY5)9f={NCK!Mi2xIkBe0yQzrX
zl2|}h<<E7bzpKkERS@v;g1a8Uiw6Lj)q}v923mO|!i`oN3ZJ^LMk3m9B$V{(!FLB&
z@IS2|oWJ`IO>%~V!sZkU&$?+Ym3O#`J-}$}fraLsS>DLy9Pa}lgK^I$Q@)KsvUOLQ
z;8C>vn7Ems-2WGnqr-@%xext1<*j=uCB(RdUTlvxD&eM>1<UhW;;rg&sswd%-=o(9
z6FPPG6t+t%r21ag-pFDLK9%qHC{xG3eEE9#O$3gLTre?fl(Ip)t4K;%V=(pxUpd)=
z?$k%tyoRL%(O0oQqkYKR1mN6VdtdC7%rzW|jSClT%^=KUK|@HW+g}Si4oLn_b}ZG8
zj-=v3@Oj8ZY^7#ypuMQ{eQR3*r@hdFUF3q+q`3FX;fJUnkC=wnW!Fx%7u?8L1-m#6
z?$AS2xuHv*!)0{N(>=@DH1z3kI>~z`INaWP!o*Bp!N$Es1Niobrb(|}CQdwR32CVu
z+;9RYsL6N9qqzEtl{b=^3qP?j^DmSdy0XNdSUipLU6>^ETJHijYvQ-S9_v&0wB$;0
z-*NxG1B3C=VmjR!uJ{O<2Xb(J&Ij15&U}|6&nnR$)PEE%UV!*ws|Fz{u^TjUuN)bV
z6O1I0rtui<a-wO^;?4Y5cZ*PAT&}PY7SROS%#C{na#ilB3FtG!PjgcrdWd_qGu^xf
zNvU2`PMRyvs6|hUPm^s)D-xH1Jt^wak`*Fbjqt_7GTilfqYNtS%v#QCw7@3I+{<p!
zQJ^+ehR$N`s^JXRzp=6NImsob6yEFWnZ0U6<6-7}yy`iF{=D>H*&8fIi*&$MRM?Yk
zSDMx=EG$jDvw_`>b@+bJ-h0b((2ZU%|M3vKF^eUWdM|htjKQrg2HsbEv9{Z#1=1~=
z8Y?wiOSrZ|j*KJ{$juJcn#zrhFm%1w9t(d{aK30i!K*fSucmX<BC*G{v7t48Xdmky
zm%9@N?Kvdu_UPrUa|`jb>StfX5N4l<&dl67!_@7ZrBr*&>sAhb7>RBw1+t#Quatj8
zh4Q(Xvf<^~NvVeGeGaf*lqIvuSo0RQ1_e4gqc$sGz;u)F3_f<lNn9fMT)z|k9}lI{
z({#FBH^3n0tGderRYQF3P?Ybveyr_u*)^p@UnJ#m>^m5~Yr+hqCNBwr<mKHirL5~w
zIdk*I=zjlAvuQczWDlAaX5Nqyo#T6$w9}o>WUrqjlI8|sieOD@+>_VI{V0ij*UU3f
zt$LrecYVYnRgI^New?%ez*NDXpU7&*X$WkeSorg~vf+Y>kP1Pow<f&(cx{HpzVPP4
z2X@$|%UOL%js^yOmNVIE!E$MyQ|7}39`<n_;x-7JPG${1CM)ToA;o-OVBMZ36kJc#
zoG8WXXFVo29uGVji}Gv_tiaCMwU>>xy5Z}kIc04Ite<Ndrm#(ga#Ve09*M7?+=c~C
zUC_@%;aLHPbod`Kg4|GDApuj9lZ|y(;Av;G$ZB-jgd8K7-6q<RQOLt$-(c-StO?rF
z9P@YE3g!%)8F}&uKUR;a+?0`8;30zc89QeZo+@?ze1ghELkZC2ih>4=&Onf9N!9#Q
zQ5-fUEiSDFw7s5h%ekz<VbZiZzd3uNqGm3UB_S4UW*qB%#*W^iQeDz!^i60vnD!_h
zO)fXl5Gx&+>u^Oh9n()<AM{C<<kL=1cEPrkMwt~TXHm1M0-mFk^_nPo-YrU3SA2Ch
ztDpS5V>~uyJ15OK`>EwgXDnji%xRM|H!6_Tg__`v;^XZD0_GB5s_1IU4*1cp%Pzj}
z_i1iUpdsY#7e4kBkB;-=-A(pbWM=p1aVDfVX?3yRSnct_Q@e}pAvwG$Y)lHeTH$3r
zRWqU+A3yg0g-P<x@0@lS9dh(5AOcx>V!gh+O}Cv(AU*Hlu1rVwC{`M<#%UmE38+wK
zjotW3i-YYC&bp0_xBe0f3H8S^H{g3>iaXYs7XWCrh52GKO*>&x+F#v9iiU_B^@>Iy
zY;yK#a#{iP29}rtu6DP&?jNLYozAmdlndGCjMd8Hwc9HpGvS;x)sVTFV(U2a@za4*
z85$Sy;u+-0ri^UrQRndbY<9f2i@mIgoLpX$1tK}KI=ARS+J^jr<>%}~?RE~o+=X&>
zc4nLTCS=T+1_j!w$ToR)qOP?Es9)>*zInqjtQ*kop$qVhSAA(mo!M|2qMB=^dSFr)
zU*Cxea~6-*Rx&q7htRiYk{7qD(BouNYcx0$^5FymS@|^mdiG=TgN||VqJo#;k1N{M
zdhqry;xr|vN7XP|l0D5HdAh8vGt6xh+;kRkv7mG?0eeDOXY;)lZY^~hzkxPeGi+ra
zkB#Jk&sQ1HR4uoh2{;;!?nn`+SE?aUGE^n_9t4Kf0}noD8~CjWry@@=GQ_qiV{vCZ
z9-Id;HO<D+76)?IgnBzI^WV);B&NbxX06IOW(hE~&AI!V8GQAzX!PgBnGFX=_6fn!
zV4vDpmhmxaNq!H5b%1&RWqZ93)BJnQJ%Ce}RJjZcoCeONy4hH$qb9L;#)%4+58^p0
zbajP#Y+F*6BTRq<S;#1UW|<&tmPW>dI~uM$7ytb}Xwy!`^+1b?f+8vY2axSAvU?%u
z-lqe=A0G~g;r$qdGTz*QA0DA+RMgo^^!wH_$g<ctD)SeTorgP*L1sV^;GNmxQ@$oU
z>4~ZR^zi%`*~1~*@ufv91Ox@gK)Dqn;6L89D?U|-7p3Q<xJS7ZmTN104>|tM0pbPU
z33gE)>~75`bAfE($+~RPPT0jUa6`wA_>3m@z*cAs?6CrdiiJ!cf6&grLXSX(y2+{8
z2^=Y%Om7thsX!XozfHpFxtruBN}bwy37VP$AEG#kx{BUku2FgPutbmhHJj=A`t%r;
z4(&uD5C%-Q9ReN+2rB&s1!hl*y`pJ?{xVkkR>#tr7R)hVBXHVvJvd4@cKVXo(pcA^
zTuWVZA)u>^<O)&}W@d<20fSu^Qs>~j_8fT^Z)KONa;Z>a!UtOVg;U;Pk+V0ioz9W*
z1?@P8A@B=n86}ap;j0`YaX|R(8kz&_QxAmgGEWl~mN)};Be<K;7Ps6sEYuj}tbBeH
zs0e<=Q2g_sU%lM6efxItby|_iH_PP&g9e|f#aiD(pF5aC`(16-%v$%eZ5$!DgFW{`
zgfap976>GAj6fa?z-1d-PTMDj>dFYxPEtl_X!u2K;C8zfBld_yaB~63`@Ref_4+IZ
zja8jWs1L@7;EVv8^bsa`)y2cjdW(<8ZOQSG_Wa^U!m<kJ^9%$Fm`F7)vBqHpVzHDC
zdiwxpJPla=ftcR9H8xttvQQrYu0Za<%SL1(;KP8g*TrAXpBGDbR8j)Y*ANJGoDXD?
zyuXUxSq0yy{HyO64mS-ao^sK)14ZCaJwkOEvK+!1iK!jBG1<Fey@5aG&jP`~z!GZa
z-PsA9v1M&N&?y3A#o<5a^#u5%sO`=BCnkM>jdgv<drTdWwol_TZE8Xcs}@v1o6x8~
zka(hKcBla0IOjD!Px_e}7obAWMT##<tC~^W?^$?CPk&0J*5O$mtqrNnZt_@&6VW(~
zo}0WU&3*sFHpNeB+OTcWAgKd@a@rl=u-LP2)+#(sEMT)(bp@q-O~_6yYo~t+WH}70
z@rQ4F0kin1O}lGrQ;`e15W;Im0|Bx;{Y$Y53G&P4haKx6wvgrXZ6v~_+MLPZH4y1~
zoO1mIYf0ld<p@9w$01moiD~%T>*-!&H`iOiv8<i>e*GaShQqMLy<i$~-E^zj(L2w|
z7ZQVry+Bywxa!$pge>e}HPjo3L4^ZF-`=9DCTNiP^!nB+*>sJUevGN!YP8vnq)Bka
z*ekm7pdlCuD%$>0^DS~P^Ai}K{~O=&zdPnXYV|**o&6~;;y-Hj|9g26C;i4^-_YCI
z$r36mvZdWaOlE!hj{`k@eH%r$yxd;K@QOy;zARM(jHGU1=T*rEf|-3RxjcG}8K$7W
z7a%OwlIYB6q*9GSv6mY<u<@5W5dg7#aSR$2emgp{cFE=RyGfxm0&rDQd0{?J&xi+b
zV=R6W@#=FcJ;I2RTEy*G_9rza2nCp(`ZN=>NTY}?N6b5VS4*xF6FUO5yz_0*?v2n0
z6_5vn;RzS4NxHEa89xuzKZmklP+-@v>1nPXn#E=`eAAL~=Fmq5qvdmt^7qt_b2wqH
zf{^kdk+fOQAD)(xu@m<h@!^0wT*)~j(s1mQL<-1afY7F!asWXhLHSxVqVk3j5N>cF
z{s+wf=CsMccui;pWJ}7+EqnmU<2~NVhwZBk9uGw`1~y6R6h`0t3i;i7m^|1sJyC@W
z0e<YHwst*&csinz{TlAqKjx_mLp_8v`qx$I4{*%}I`)!~QbEZoO+v})`P=RukKXS-
zCo2^6EH53#?toPW#qaC}uo=;2OrWN;&vAm>@TeO4TGjC8nulN(MMVm*%sZHc(jb+~
zK%`SPgr?j`+z!(?3<)@XU5BF)C0c{LLciD7aw8kRg1_U;N)EeuV5}y|_yabSirEa%
zBu&8qtK1Ux12kLxpRAOFbleE%wZ|+AZDSB6IXIjW5zzJ^AmSxc<M=0#p)10U#SNkZ
zI$#d9^GjNg=vEbwL<GVRI)$tD7b2XB>w$B2(2^y*9rx)RSYBw<%WGdf*M>4|%ErqQ
zk(fi;Uq`undaBRS`y_(_bMH!MasFRq25x56T0m0+CDWw_W38N1h^Cg-sLjnx6ADOD
zs(*bep}V)z(GMiz@EI9Gdp{Dg_otiPv{q_b32b07@jH#y)X53#OehCv=rvECf7H_~
zT;`!|6Y|hNB-Vk-C~4j8s=UiR9~AAkm2%PYaEa2{jMX!dzm1wp1&y8a#3<xm=@oJK
zrGldTpZb%)U;<T;c|m!ox4ZjXRTl64C_dL3e?D?BjSg1rsUT5Jd2mQW1L#63G+hPy
zgr1Yw6)>mcP_h;HJ^xx5Xi7c+HT}Oi-dGME6lvTee1&ijlpz%tEj6&5H<!Lx-{M#r
z2-bZBXg+o<^*~3#7Y}C{V>G@oo$LF&a&Zc@!PWGs)=Z$a-c-Y#wyJAR4F>Gg6xR)$
z*42VNi=6PliN2oKkV!tsEl9Qe!yRUtU$ur*$ox>*xOGcY=`SGGO;HIHHtS5~#>Y}T
zbUhdQsYg(^2=jMZ9E^4k@aYkPZBVRT2^^L<@Nv&!h+u64_Fj}TAoC?c280nA1-$=x
z^++`TgWGDrIVc6&!u`~>9X4TnzD9ba!sEq<BBf;4*6Te%h)OLjtv6=w6?-M6_qds|
zfBwEHf#J9OETCx_wIfAb;%u1231C|8=Z-L>xAiof(%YoE`N>Na;C%17dS@+c|Fc4$
zFz3kUUjn(Bd5tnH8#wa{$jyFOoAd$-gt#8fXdjV3fB(L|vC~9%!RltFNw&h~RLv`_
zo9jb9yb9C{2jL*94}e<slC2MYmRYC6J5)8=R3lvzvfvQyZ_xSs#5CORx^W<<=3OAq
z#eO4Zfxy06+EX*7GgF}9!OHNu5}%kpfLE1<`wp+IcO<%CD-CRN>eqc+t|~U7V?&@g
zK*KR_6kt4GJf|l;UfzN+vAsTPHLTl0P&}{|#LBtOK%V;OC6R9?mx{5|;MSa2jS4?P
ziRJSzki09h49V>a26!92MtWNiV^MbN(PxMrK%Mj44<^VDLF{ET5i?R+EdI2}-O6q@
zn;R3Ul&ay|=Z0+R8QyROb}?+d#VS;Rj9S8v$4*upvu%?{7p+WGH8{0dQE5qbqImcq
zjrT#J^a#ctL--o@5ajTLTL1LSa3m+zaKy<M*wUd>;E#%zKWkt<-=eN?_NT7TbvuOY
z(akG$Tzs%4W{Gbj0ooPDJ*N!5PCT0c$6N+>d>7(vHdQv%`|s6V@p3o_^11T3CDioR
zd)p!>oOCcX;KHP&lNZA4{$T2Rya+t?w>gp5ogV)t3r`nBVP>y6!~@<PC<zbb%)Pkr
z;1iUkxh<WG9{V*e6Ay+eF^4*Ur+p+IO5kh+rI{g24nP5MmY_6SjZ{+nLv|c6mEbJ(
zo;!lUN|9rWd-(jT{n?Co79x(|7es+Mi~&6q*hqsy^WVH){QU^@UkyBk0yd%h@jpSd
h|L=onlkN(n?-TP7uX7(5gK0d>#OUPrg@-TR`Y&4NE@c1!

literal 0
HcmV?d00001

diff --git a/playbooks/Zscaler_Outbound_Traffic_Filtering.py b/playbooks/Zscaler_Outbound_Traffic_Filtering.py
new file mode 100755
index 0000000000..ced11584cd
--- /dev/null
+++ b/playbooks/Zscaler_Outbound_Traffic_Filtering.py
@@ -0,0 +1,170 @@
+"""
+Accepts a URL or list of URLs as input. Blocks the given URLs in ZScaler.\n\nhttps://d3fend.mitre.org/technique/d3f:OutboundTrafficFiltering/
+"""
+
+
+import phantom.rules as phantom
+import json
+from datetime import datetime, timedelta
+
+
+@phantom.playbook_block()
+def on_start(container):
+    phantom.debug('on_start() called')
+
+    # call 'url_input_filter' block
+    url_input_filter(container=container)
+
+    return
+
+@phantom.playbook_block()
+def url_input_filter(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs):
+    phantom.debug("url_input_filter() called")
+
+    ################################################################################
+    # Determine branches based on provided inputs.
+    ################################################################################
+
+    # collect filtered artifact ids and results for 'if' condition 1
+    matched_artifacts_1, matched_results_1 = phantom.condition(
+        container=container,
+        conditions=[
+            ["playbook_input:input_url", "!=", None]
+        ],
+        name="url_input_filter:condition_1")
+
+    # call connected blocks if filtered artifacts or results
+    if matched_artifacts_1 or matched_results_1:
+        block_url(action=action, success=success, container=container, results=results, handle=handle, filtered_artifacts=matched_artifacts_1, filtered_results=matched_results_1)
+
+    return
+
+
+@phantom.playbook_block()
+def block_url(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs):
+    phantom.debug("block_url() called")
+
+    # phantom.debug('Action: {0} {1}'.format(action['name'], ('SUCCEEDED' if success else 'FAILED')))
+
+    ################################################################################
+    # Block urls in ZScaler based on given urls. 
+    ################################################################################
+
+    playbook_input_input_url = phantom.collect2(container=container, datapath=["playbook_input:input_url"])
+
+    parameters = []
+
+    # build parameters list for 'block_url' call
+    for playbook_input_input_url_item in playbook_input_input_url:
+        if playbook_input_input_url_item[0] is not None:
+            parameters.append({
+                "url": playbook_input_input_url_item[0],
+            })
+
+    ################################################################################
+    ## Custom Code Start
+    ################################################################################
+
+    # Write your custom code here...
+
+    ################################################################################
+    ## Custom Code End
+    ################################################################################
+
+    phantom.act("block url", parameters=parameters, name="block_url", assets=["zscaler"], callback=block_url_success_filter)
+
+    return
+
+
+@phantom.playbook_block()
+def build_observable(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs):
+    phantom.debug("build_observable() called")
+
+    ################################################################################
+    # This block uses custom code to generate an observable dictionary to output into 
+    # the observables data path.
+    ################################################################################
+
+    block_url_result_data = phantom.collect2(container=container, datapath=["block_url:action_result.summary","block_url:action_result.status","block_url:action_result.message","block_url:action_result.parameter.url"], action_results=results)
+
+    block_url_result_item_0 = [item[0] for item in block_url_result_data]
+    block_url_result_item_1 = [item[1] for item in block_url_result_data]
+    block_url_result_message = [item[2] for item in block_url_result_data]
+    block_url_parameter_url = [item[3] for item in block_url_result_data]
+
+    build_observable__observable_array = None
+
+    ################################################################################
+    ## Custom Code Start
+    ################################################################################
+
+    build_observable__observable_array = list()
+    for summary, status, message, url in zip(block_url_result_item_0, block_url_result_item_1, block_url_result_message, block_url_parameter_url):
+        observable = {
+            "type": "url",
+            "value": url,
+            "source": "ZScaler"
+        }
+        if len(summary["ignored"]) > 0:
+            observable["status"] = "ignored"
+        else:
+            observable["status"] = "updated"
+            
+        build_observable__observable_array.append(observable)
+        
+
+    ################################################################################
+    ## Custom Code End
+    ################################################################################
+
+    phantom.save_run_data(key="build_observable:observable_array", value=json.dumps(build_observable__observable_array))
+
+    return
+
+
+@phantom.playbook_block()
+def block_url_success_filter(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs):
+    phantom.debug("block_url_success_filter() called")
+
+    ################################################################################
+    # Determine if the block url action was successful or not.
+    ################################################################################
+
+    # collect filtered artifact ids and results for 'if' condition 1
+    matched_artifacts_1, matched_results_1 = phantom.condition(
+        container=container,
+        conditions=[
+            ["block_url:action_result.status", "==", "success"]
+        ],
+        name="block_url_success_filter:condition_1")
+
+    # call connected blocks if filtered artifacts or results
+    if matched_artifacts_1 or matched_results_1:
+        build_observable(action=action, success=success, container=container, results=results, handle=handle, filtered_artifacts=matched_artifacts_1, filtered_results=matched_results_1)
+
+    return
+
+
+@phantom.playbook_block()
+def on_finish(container, summary):
+    phantom.debug("on_finish() called")
+
+    build_observable__observable_array = json.loads(_ if (_ := phantom.get_run_data(key="build_observable:observable_array")) != "" else "null")  # pylint: disable=used-before-assignment
+
+    output = {
+        "observable": build_observable__observable_array,
+    }
+
+    ################################################################################
+    ## Custom Code Start
+    ################################################################################
+
+    # Write your custom code here...
+
+    ################################################################################
+    ## Custom Code End
+    ################################################################################
+
+    phantom.save_playbook_output_data(output=output)
+
+    return
\ No newline at end of file
diff --git a/playbooks/Zscaler_Outbound_Traffic_Filtering.yml b/playbooks/Zscaler_Outbound_Traffic_Filtering.yml
new file mode 100644
index 0000000000..d40a1a03a1
--- /dev/null
+++ b/playbooks/Zscaler_Outbound_Traffic_Filtering.yml
@@ -0,0 +1,24 @@
+name: ZScaler Outbound Traffic Filtering
+id: 3e0df448-0546-4b2b-9143-365161cf40f9
+version: 1
+date: '2023-03-31'
+author: Patrick Bareiss, Splunk
+type: Investigation
+description: Accepts a URL or list of URLs and block them in ZScaler. Generates a list of observables with the blocked URLs.
+playbook: ZScaler_Outbound_Traffic_Filtering
+how_to_implement: This input playbook requires the ZScaler connector to be configured. It is designed to work in conjunction with the Dynamic URL Outbound Traffic Filtering Analysis playbook or other playbooks in the same style. 
+references:
+  - https://d3fend.mitre.org/technique/d3f:OutboundTrafficFiltering/
+app_list: 
+  - ZScaler
+tags:
+  platform_tags:
+    - denylist
+    - url
+    - D3-OTF
+    - ZScaler
+  playbook_type: Input
+  vpe_type: Modern
+  playbook_fields: []
+  product:
+  - Splunk SOAR
\ No newline at end of file

From b55a0281ea4e2b2d9aeaa579492039a8d350dd79 Mon Sep 17 00:00:00 2001
From: P4T12ICK <patrickbareiss1989@gmail.com>
Date: Wed, 21 Jun 2023 11:33:05 +0200
Subject: [PATCH 2/3] Improved the data paths

---
 .../Zscaler_Outbound_Traffic_Filtering.json   | 34 ++++++++-----------
 .../Zscaler_Outbound_Traffic_Filtering.py     | 21 +++++++-----
 2 files changed, 27 insertions(+), 28 deletions(-)
 mode change 100755 => 100644 playbooks/Zscaler_Outbound_Traffic_Filtering.json
 mode change 100755 => 100644 playbooks/Zscaler_Outbound_Traffic_Filtering.py

diff --git a/playbooks/Zscaler_Outbound_Traffic_Filtering.json b/playbooks/Zscaler_Outbound_Traffic_Filtering.json
old mode 100755
new mode 100644
index f77a7624f5..04a5c3c26f
--- a/playbooks/Zscaler_Outbound_Traffic_Filtering.json
+++ b/playbooks/Zscaler_Outbound_Traffic_Filtering.json
@@ -52,7 +52,7 @@
                     "targetPort": "7_in"
                 }
             ],
-            "hash": "d00eda8b809a9b54fd2a3df75a64dc1538169f7c",
+            "hash": "ddce2d54e4936120ec7acc772b88f91fab41ec55",
             "nodes": {
                 "0": {
                     "data": {
@@ -67,8 +67,8 @@
                     "id": "0",
                     "type": "start",
                     "warnings": {},
-                    "x": 20,
-                    "y": 0
+                    "x": 19.999999999999986,
+                    "y": -6.394884621840902e-14
                 },
                 "1": {
                     "data": {
@@ -91,6 +91,8 @@
                         "advanced": {
                             "customName": "url input filter",
                             "customNameId": 0,
+                            "delimiter": ",",
+                            "delimiter_enabled": true,
                             "description": "Determine branches based on provided inputs.",
                             "join": [],
                             "note": "Determine branches based on provided inputs."
@@ -118,11 +120,7 @@
                     "errors": {},
                     "id": "4",
                     "type": "filter",
-                    "warnings": {
-                        "config": [
-                            "Reconfigure invalid datapath."
-                        ]
-                    },
+                    "warnings": {},
                     "x": 60,
                     "y": 148
                 },
@@ -147,7 +145,7 @@
                         "functionName": "block_url",
                         "id": "6",
                         "parameters": {
-                            "url": "playbook_input:input_url"
+                            "url": "filtered-data:url_input_filter:condition_1:playbook_input:input_url"
                         },
                         "requiredParameters": [
                             {
@@ -160,11 +158,7 @@
                     "errors": {},
                     "id": "6",
                     "type": "action",
-                    "warnings": {
-                        "config": [
-                            "Reconfigure invalid datapath."
-                        ]
-                    },
+                    "warnings": {},
                     "x": 0,
                     "y": 328
                 },
@@ -184,7 +178,7 @@
                             "block_url:action_result.summary",
                             "block_url:action_result.status",
                             "block_url:action_result.message",
-                            "block_url:action_result.parameter.url"
+                            "filtered-data:url_input_filter:condition_1:playbook_input:input_url"
                         ],
                         "outputVariables": [
                             "observable_array"
@@ -194,7 +188,7 @@
                     "errors": {},
                     "id": "7",
                     "type": "code",
-                    "userCode": "\n    build_observable__observable_array = list()\n    for summary, status, message, url in zip(block_url_result_item_0, block_url_result_item_1, block_url_result_message, block_url_parameter_url):\n        observable = {\n            \"type\": \"url\",\n            \"value\": url,\n            \"source\": \"ZScaler\"\n        }\n        if len(summary[\"ignored\"]) > 0:\n            observable[\"status\"] = \"ignored\"\n        else:\n            observable[\"status\"] = \"updated\"\n            \n        build_observable__observable_array.append(observable)\n        \n\n",
+                    "userCode": "\n    build_observable__observable_array = list()\n    for summary, status, message, url in zip(block_url_result_item_0, block_url_result_item_1, block_url_result_message, filtered_input_0_input_url_values):\n        observable = {\n            \"type\": \"url\",\n            \"value\": url,\n            \"source\": \"ZScaler\"\n        }\n        if len(summary[\"ignored\"]) > 0:\n            observable[\"status\"] = \"ignored\"\n        else:\n            observable[\"status\"] = \"updated\"\n            \n        build_observable__observable_array.append(observable)\n        \n\n",
                     "warnings": {},
                     "x": 0,
                     "y": 700
@@ -204,6 +198,8 @@
                         "advanced": {
                             "customName": "block url success filter",
                             "customNameId": 0,
+                            "delimiter": ",",
+                            "delimiter_enabled": true,
                             "description": "Determine if the block url action was successful or not.",
                             "join": [],
                             "note": "Determine if the block url action was successful or not."
@@ -263,10 +259,10 @@
         ],
         "playbook_type": "data",
         "python_version": "3",
-        "schema": "5.0.9",
-        "version": "6.0.0.114895"
+        "schema": "5.0.10",
+        "version": "6.0.1.123902"
     },
-    "create_time": "2023-03-31T06:50:12.071333+00:00",
+    "create_time": "2023-06-21T09:27:47.392005+00:00",
     "draft_mode": false,
     "labels": [
         "*"
diff --git a/playbooks/Zscaler_Outbound_Traffic_Filtering.py b/playbooks/Zscaler_Outbound_Traffic_Filtering.py
old mode 100755
new mode 100644
index ced11584cd..f5e7bef5a4
--- a/playbooks/Zscaler_Outbound_Traffic_Filtering.py
+++ b/playbooks/Zscaler_Outbound_Traffic_Filtering.py
@@ -31,7 +31,8 @@ def url_input_filter(action=None, success=None, container=None, results=None, ha
         conditions=[
             ["playbook_input:input_url", "!=", None]
         ],
-        name="url_input_filter:condition_1")
+        name="url_input_filter:condition_1",
+        delimiter=",")
 
     # call connected blocks if filtered artifacts or results
     if matched_artifacts_1 or matched_results_1:
@@ -50,15 +51,15 @@ def block_url(action=None, success=None, container=None, results=None, handle=No
     # Block urls in ZScaler based on given urls. 
     ################################################################################
 
-    playbook_input_input_url = phantom.collect2(container=container, datapath=["playbook_input:input_url"])
+    filtered_input_0_input_url = phantom.collect2(container=container, datapath=["filtered-data:url_input_filter:condition_1:playbook_input:input_url"])
 
     parameters = []
 
     # build parameters list for 'block_url' call
-    for playbook_input_input_url_item in playbook_input_input_url:
-        if playbook_input_input_url_item[0] is not None:
+    for filtered_input_0_input_url_item in filtered_input_0_input_url:
+        if filtered_input_0_input_url_item[0] is not None:
             parameters.append({
-                "url": playbook_input_input_url_item[0],
+                "url": filtered_input_0_input_url_item[0],
             })
 
     ################################################################################
@@ -85,12 +86,13 @@ def build_observable(action=None, success=None, container=None, results=None, ha
     # the observables data path.
     ################################################################################
 
-    block_url_result_data = phantom.collect2(container=container, datapath=["block_url:action_result.summary","block_url:action_result.status","block_url:action_result.message","block_url:action_result.parameter.url"], action_results=results)
+    block_url_result_data = phantom.collect2(container=container, datapath=["block_url:action_result.summary","block_url:action_result.status","block_url:action_result.message"], action_results=results)
+    filtered_input_0_input_url = phantom.collect2(container=container, datapath=["filtered-data:url_input_filter:condition_1:playbook_input:input_url"])
 
     block_url_result_item_0 = [item[0] for item in block_url_result_data]
     block_url_result_item_1 = [item[1] for item in block_url_result_data]
     block_url_result_message = [item[2] for item in block_url_result_data]
-    block_url_parameter_url = [item[3] for item in block_url_result_data]
+    filtered_input_0_input_url_values = [item[0] for item in filtered_input_0_input_url]
 
     build_observable__observable_array = None
 
@@ -99,7 +101,7 @@ def build_observable(action=None, success=None, container=None, results=None, ha
     ################################################################################
 
     build_observable__observable_array = list()
-    for summary, status, message, url in zip(block_url_result_item_0, block_url_result_item_1, block_url_result_message, block_url_parameter_url):
+    for summary, status, message, url in zip(block_url_result_item_0, block_url_result_item_1, block_url_result_message, filtered_input_0_input_url_values):
         observable = {
             "type": "url",
             "value": url,
@@ -136,7 +138,8 @@ def block_url_success_filter(action=None, success=None, container=None, results=
         conditions=[
             ["block_url:action_result.status", "==", "success"]
         ],
-        name="block_url_success_filter:condition_1")
+        name="block_url_success_filter:condition_1",
+        delimiter=",")
 
     # call connected blocks if filtered artifacts or results
     if matched_artifacts_1 or matched_results_1:

From 1e0ec0734598933893dc7070943e977ffd8cad56 Mon Sep 17 00:00:00 2001
From: P4T12ICK <patrickbareiss1989@gmail.com>
Date: Wed, 21 Jun 2023 16:22:42 +0200
Subject: [PATCH 3/3] Improvements

---
 playbooks/Zscaler_Outbound_Traffic_Filtering.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/playbooks/Zscaler_Outbound_Traffic_Filtering.yml b/playbooks/Zscaler_Outbound_Traffic_Filtering.yml
index d40a1a03a1..f99cf8c988 100644
--- a/playbooks/Zscaler_Outbound_Traffic_Filtering.yml
+++ b/playbooks/Zscaler_Outbound_Traffic_Filtering.yml
@@ -3,7 +3,7 @@ id: 3e0df448-0546-4b2b-9143-365161cf40f9
 version: 1
 date: '2023-03-31'
 author: Patrick Bareiss, Splunk
-type: Investigation
+type: Response
 description: Accepts a URL or list of URLs and block them in ZScaler. Generates a list of observables with the blocked URLs.
 playbook: ZScaler_Outbound_Traffic_Filtering
 how_to_implement: This input playbook requires the ZScaler connector to be configured. It is designed to work in conjunction with the Dynamic URL Outbound Traffic Filtering Analysis playbook or other playbooks in the same style.